Add for tshark dns query filter