ZyXEL Communications ZyWALL USG 200 Series User Manual page 623

34.8.2.2 Analyze Packets
Use the packet capture screen (see
analyzer (also known as a network or protocol analyzer) such as Wireshark or
Ethereal to investigate some more.
Figure 439 DNS Query Packet Details
From the details about DNS query you see that the protocol is UDP and the port is
53. The type of DNS packet is standard query and the Flag is 0x0100 with an
offset of 2. Therefore enter |010| as the first pattern.
ZyWALL USG 100/200 Series User's Guide
Section 53.3 on page
Chapter 34 IDP
892) and a packet
623