When I use the simple "Port 53" capture filter on my main ethernet interface I correctly see all of the DNS queries and their corresponding responses. However, when I use this same filter against an OpenVPN interface on this same machine I see only the DNS queries and none of the responses. They are there, however, because if I capture all traffic against this interface and then use the simple "DNS" display filter, I see all queries and all responses as expected. It appears something is amiss with WinPCAP but I am unable to troubleshoot it. Any help appreciated! asked 23 Apr '16, 16:12 jxdomb |
One Answer:
Please try Npcap, a fork of WinPcap but more advanced: answered 26 Apr '16, 04:01 Yang Luo |