ansaurus

Question

Answer 1

A:

Here it says

You can check the following homepage for more details about filter expression. Designing Capture Filters for Ethereal/Wireshark

Thus, I believe

captor.setFilter("dns", true);

should work

nc3b 2010-04-27 05:40:31

its the exception that throws when i tried your solutionException in thread "main" java.io.IOException: Error occurred while compiling or setting filter: syntax error at jpcap.JpcapCaptor.setFilter(Native Method) at test1.JpcapTip.main(JpcapTip.java:25)Java Result: 1

rgksugan 2010-04-27 06:12:05

Answer 2

A:

One uglier approach is to scan on port 53 for UDP. However, previous answer looks cleaner from implementation aspect.

Jack 2010-04-27 05:56:38

is the port number the source port or the destination port

rgksugan 2010-04-27 06:13:25

Well, as we are sending this packet to well-known port 53 of server. That means, destination port number. PS: You may want to check for TCP and UDP both.

Jack 2010-04-27 10:45:05

Answer 3

A:

i found it easy processing all the packets in port 53 and so i used this filter

udp dst port 53

tanx jack for ur hint

rgksugan 2010-04-29 08:59:17

ansaurus

tags:

views:

answers:

capturing dns packets using java

related questions