How can I specify a display filter such that I get all UDP packets which are NOT recognized as proper UDP application level protocols like DNS, RTP etc. asked 26 Oct '10, 20:46 skypemesm |
One Answer:
Try "udp and data" - if no dissector handles the UDP payload, then it will be handed to the "data" dissector. answered 26 Oct '10, 20:55 Guy Harris ♦♦ |