DNS pcap Filter Generator

You can use this page to generate a pcap filter to match a specific DNS query.

You can also download a Perl script if you want to generate filters offline.

You must include either a query ID or a QNAME. QTYPE and QCLASS are optional, and will only appear in the rule if a QNAME is used.

Query ID: Number between 0 and 65535 QNAME: Hostname, like "id.server" or "www.example.net" QTYPE: QCLASS:
IPv4 IPv6