First of all, I had a look in the following bug: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7380 which did not really answered my question.
My question: is there a way to disable the fact that Wireshark takes resolution information from the trace (i.e. check the DNS lookups inside the trace) to resolve IPs?
I have all the resolutions from a hosts files, and I don't want the resolution to be based on any DNS solution (either from external DNS server, or from inside DNS request from trace), but ONLY from the hosts file I defined.
Is this possible? I don't find any parameter looking like this in the preferences.
Thanks Best Regards Louis
asked 12 Aug '14, 03:13
OK, after looking for this for a few hours, I finally found the solution, where I was not expecting to find it.
There is a parameter in the preferences, under "Protocols->DNS", called "Use DNS Packet data for address resolution", that you have to untick. I would have expect to see such a parameter in the "Name Resolution" tab, which would make more sense.
anyway, problem fixed...
answered 12 Aug '14, 05:11