This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi There,

Wireshark 1.12.0

First of all, I had a look in the following bug: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7380 which did not really answered my question.

My question: is there a way to disable the fact that Wireshark takes resolution information from the trace (i.e. check the DNS lookups inside the trace) to resolve IPs?

I have all the resolutions from a hosts files, and I don't want the resolution to be based on any DNS solution (either from external DNS server, or from inside DNS request from trace), but ONLY from the hosts file I defined.

Is this possible? I don't find any parameter looking like this in the preferences.

Thanks Best Regards Louis

asked 12 Aug '14, 03:13

ketzaldev's gravatar image

ketzaldev
16114
accept rate: 100%


OK, after looking for this for a few hours, I finally found the solution, where I was not expecting to find it.

There is a parameter in the preferences, under "Protocols->DNS", called "Use DNS Packet data for address resolution", that you have to untick. I would have expect to see such a parameter in the "Name Resolution" tab, which would make more sense.

anyway, problem fixed...

permanent link

answered 12 Aug '14, 05:11

ketzaldev's gravatar image

ketzaldev
16114
accept rate: 100%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×109
×22
×20

question asked: 12 Aug '14, 03:13

question was seen: 3,173 times

last updated: 12 Aug '14, 05:11

p​o​w​e​r​e​d by O​S​Q​A