Changes between Initial Version and Version 1 of FilterExpressions


Ignore:
Timestamp:
09/09/07 18:48:37 (15 years ago)
Author:
perry
Comment:

Add some DNS related tcpdump filter expressions

Legend:

Unmodified
Added
Removed
Modified
  • FilterExpressions

    v1 v1  
     1== DNS Related ==
     2=== Queries ===
     3{{{'port 53 and udp[10]&0x80==0x00'}}}
     4=== Responses ===
     5{{{'port 53 and udp[10]&0x80!=0x00'}}}
     6=== Successful replies (RCODE=NoError)) ===
     7{{{'port 53 and udp[10]&0x80!=0 and udp[11]&15==0'}}}
     8=== Format Error (RCODE=FormErr) ===
     9{{{'port 53 and udp[10]&0x80!=0 and udp[11]&15==1'}}}
     10=== Server failure (RCODE=ServFail) ===
     11{{{'port 53 and udp[10]&0x80!=0 and udp[11]&15==2'}}}
     12=== Name Error (RCODE=NXDOMAIN) ===
     13{{{'port 53 and udp[10]&0x80!=0 and udp[11]&15==3'}}}
     14=== Not implemented (RCODE=NotImp) ===
     15{{{'port 53 and udp[10]&0x80!=0 and udp[11]&15==4'}}}
     16=== Refused (RCODE=Refused) ===
     17{{{'port 53 and udp[10]&0x80!=0 and udp[11]&15==5'}}}
     18=== Truncated reply (requiring a resend via TCP) ===
     19{{{'port 53 and udp[10]&0x02!=0'}}}