This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Resolving server from DNS?

0

Using Wireshark, how would I able to resolve server from DNS?

asked 20 Sep '15, 04:56

airr's gravatar image

airr
11●1●5
accept rate: 0%

edited 21 Sep '15, 00:12

One Answer:

2

Start a capture on the correct interface using the capture filter "port 53", and then force your computer to lookup up a name, e.g. from a command line use (Windows) nslookup name.to.lookup or (Linux) dig name.to.lookup.

Your computer might have cached the name so to force a lookup, try a name you haven't visited for a while.

answered 20 Sep '15, 05:21

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206
accept rate: 22%

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(20 Sep '15, 13:19) grahamb ♦