I'm looking for a way to filter a packet capture in wireshark for instances where our server responds with "Refused" to a recursive DNS query.
dns.resp.type==
doesn't seem to offer anything that I see as a match to my request, do I need to look somewhere other than under dns.resp
altogether?