This is a static archive of our old Q&A Site. Please post any new questions and answers at

display filter to show UDP packets which are not recognized UDP protocols like DNS, RTP etc.


How can I specify a display filter such that I get all UDP packets which are NOT recognized as proper UDP application level protocols like DNS, RTP etc.

asked 26 Oct '10, 20:46

skypemesm's gravatar image

accept rate: 0%

One Answer:


Try "udp and data" - if no dissector handles the UDP payload, then it will be handed to the "data" dissector.

answered 26 Oct '10, 20:55

Guy%20Harris's gravatar image

Guy Harris ♦♦
accept rate: 19%