How to filter for DNS "A" responses in Wireshark

In Wireshark, you can filter for DNS packets with an A (IPv4 record) response type using the

wireshark_dns_filter.txt

dns.resp.type == 1

dns.resp.type == 1

filter. 1 is the binary code for the A response.

In particular, this will filter out NXDOMAIN responses that might clutter your view.

Check out similar posts by category: Networking

If this post helped you, please consider buying me a coffee or donating via PayPal to support research & publishing of new posts on TechOverflow