This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

display filter for hostname version 1.8.3

0

I am at a loss. I am trying to do the following as either a capture filter or a display filter and neither works:

host pjsip.lab

According to everything I have read it looks right, but it won't apply.

Any help would be great.

Robert

asked 26 Oct '12, 09:41

Robert11314's gravatar image

Robert11314
1111
accept rate: 0%


One Answer:

1

What error message do you get? "host pjsip.lab" is a capture filter, not a display filter. The syntax is valid, but Wireshark must be able to resolve the host name to an IP address. On my computer, Wireshark gives an error because "host.pjsip.lab" does not resolve.

answered 26 Oct '12, 18:02

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

edited 26 Oct '12, 18:16

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196