This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

display filter to show UDP packets which are not recognized UDP protocols like DNS, RTP etc.

0

How can I specify a display filter such that I get all UDP packets which are NOT recognized as proper UDP application level protocols like DNS, RTP etc.

asked 26 Oct '10, 20:46

skypemesm's gravatar image

skypemesm
46669
accept rate: 0%


One Answer:

3

Try "udp and data" - if no dissector handles the UDP payload, then it will be handed to the "data" dissector.

answered 26 Oct '10, 20:55

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%