This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Using Wireshark, how would I able to resolve server from DNS?

asked 20 Sep '15, 04:56

airr's gravatar image

airr
1115
accept rate: 0%

edited 21 Sep '15, 00:12


Start a capture on the correct interface using the capture filter "port 53", and then force your computer to lookup up a name, e.g. from a command line use (Windows) nslookup name.to.lookup or (Linux) dig name.to.lookup.

Your computer might have cached the name so to force a lookup, try a name you haven't visited for a while.

permanent link

answered 20 Sep '15, 05:21

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(20 Sep '15, 13:19) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×109
×36

question asked: 20 Sep '15, 04:56

question was seen: 1,157 times

last updated: 21 Sep '15, 00:12

p​o​w​e​r​e​d by O​S​Q​A