wiki:FilterExpressions

Version 2 (modified by perry, 14 years ago) (diff)

Fix markup

DNS Related

Queries

'port 53 and udp[10]&0x80==0x00'

Responses

'port 53 and udp[10]&0x80!=0x00'

Successful replies (RCODE=NoError))

'port 53 and udp[10]&0x80!=0 and udp[11]&15==0'

Format Error (RCODE=FormErr)

'port 53 and udp[10]&0x80!=0 and udp[11]&15==1'

Server failure (RCODE=ServFail)

'port 53 and udp[10]&0x80!=0 and udp[11]&15==2'

Name Error (RCODE=NXDOMAIN)

'port 53 and udp[10]&0x80!=0 and udp[11]&15==3'

Not implemented (RCODE=NotImp)

'port 53 and udp[10]&0x80!=0 and udp[11]&15==4'

Refused (RCODE=Refused)

'port 53 and udp[10]&0x80!=0 and udp[11]&15==5'

Truncated reply (requiring a resend via TCP)

'port 53 and udp[10]&0x02!=0'