Hi There, Wireshark 1.12.0 First of all, I had a look in the following bug: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7380 which did not really answered my question. My question: is there a way to disable the fact that Wireshark takes resolution information from the trace (i.e. check the DNS lookups inside the trace) to resolve IPs? I have all the resolutions from a hosts files, and I don't want the resolution to be based on any DNS solution (either from external DNS server, or from inside DNS request from trace), but ONLY from the hosts file I defined. Is this possible? I don't find any parameter looking like this in the preferences. Thanks Best Regards Louis asked 12 Aug '14, 03:13  ketzaldev |
One Answer:
OK, after looking for this for a few hours, I finally found the solution, where I was not expecting to find it. There is a parameter in the preferences, under "Protocols->DNS", called "Use DNS Packet data for address resolution", that you have to untick. I would have expect to see such a parameter in the "Name Resolution" tab, which would make more sense. anyway, problem fixed... answered 12 Aug '14, 05:11 ketzaldev |
