Tcpdump filter DNS packets
Jan 31, 2021
Tcpdump is a very powerful Linux command to capture packets. We can use tcpdump to filter DNS query packets to learn more about how DNS works.
How DNS works?
DNS is short for Domain Name System. It is simply a database that links meaningful names (known as host names), such as howtouselinux.com, to a specific IP address, such as 185.230.63.171.
DNS uses both TCP and UDP port 53. The most frequently used port for DNS is UDP 53. This is used for DNS queries on the client-side.