First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Wireshark, DNS Over HTTPS, and NextDNS

  • retag add tags

Is there any way to get Wireshark to make direct DNS lookups using DNS Over HTTPS (DOH)? If not, is there any plan to support this? This seems like a strange omission for a major network security tool.

I can configure browsers like Firefox to do this with a Trusted Recursive Resolver (TRR) URL like https://dns.nextdns.io/[NextDNS ID for macOS Device]/Firefox/ in about:config so that DNS lookups are listed as coming from not only my macOS device, but Firefox on that device specifically, but there doesn’t seem to be any way to do this in Wireshark or to even have it use DNS Over HTTPS at all unless it’s using the default OS resolver.

Patrick Dark's avatar
1
Patrick Dark
asked 2023-08-17 13:00:10 +0000, updated 2023-08-17 13:26:35 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Wireshark isn't really a network security tool, it's a packet inspection tool, and as such I would expect folks using it would like to see the contents of DNS requests and responses without having to configure decryption (if at all possible).

Name resolution by Wireshark itself can be disabled by configuration.

An enhancement request can be raised at the Wireshark GitLab instance.

grahamb's avatar
23.8k
grahamb
answered 2023-08-17 13:24:32 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Make sure to mention to change from c-ares to unbound.

Jaap's avatar Jaap (2023-08-17 15:24:40 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer