How can I specify a display filter such that I get all UDP packets which are NOT recognized as proper UDP application level protocols like DNS, RTP etc.
asked 26 Oct '10, 20:46
Try "udp and data" - if no dissector handles the UDP payload, then it will be handed to the "data" dissector.
answered 26 Oct '10, 20:55
Guy Harris ♦♦