DNS display filters

Some common DNS display filters are as follows:

  • Display DNS queries and response:
    • dns.flags.response == 0 for DNS queries
    • dns.flags.response == 1 for DNS response
  • Display only DNS responses with four answers or more:
    • dns.count.answers >= 4