This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Name resolution is not happening via host file in AppData directory

0

Hi,

I am using Version 2.2.0 (v2.2.0-0-g5368c50 from master-2.2) of Wireshark which the most recent one.

I have updated the "hosts" file that is located in C:\Users\administrator\AppData\Roaming\Wireshark

Every time I reboot wireshark or reload capture files then name resolution does not get shown as per hosts file. I have tried different combination in check boxes of name resolution menu. That is keeping only view from hosts file, keeping multiple check boxes including view from hosts file, but no luck.

Please help.

asked 05 Oct '16, 02:14

Engineer786's gravatar image

Engineer786
6112
accept rate: 0%

edited 05 Oct '16, 06:23

Jaap's gravatar image

Jaap ♦
11.7k16101

Your OS?

What does the Help -> About Wireshark -> Folders dialog show for the Personal configuration location?

(05 Oct '16, 03:06) grahamb ♦

Hi,

My OS is Win7.

The About Wireshark shows:

Personal configuration C:\Users\administrator\AppData\Roaming\Wireshark\

Thanks.

(05 Oct '16, 03:34) Engineer786

Then that location is where you should be placing your hosts file.

(05 Oct '16, 03:40) grahamb ♦

Yes. My hosts file is located over here. Do I need to specifically check and uncheck some options in Preferences > Name resolution section?

(05 Oct '16, 03:41) Engineer786

Your question states you have the hosts file in

Users > Admin > App Data > Wireshark

which is not the same as

Personal configuration C:\Users\administrator\AppData\Roaming\Wireshark
(05 Oct '16, 03:47) grahamb ♦

Sorry, that was a typo. I was typing it from memory without copying paste the exact path.

(05 Oct '16, 03:50) Engineer786

Sorry, that was a typo. The hosts file in my PC is located over here:

C:\Users\administrator\AppData\Roaming\Wireshark

(05 Oct '16, 03:54) Engineer786

Works for me, edit hosts, load capture, new name shows up.

Can you show a (anonymized if necessary) snippet of your hosts file to ensure you have the data in the correct format?

What options do you have selected on the Name Resolution preferences?

(05 Oct '16, 04:38) grahamb ♦
showing 5 of 8 show 3 more comments

One Answer:

0

Hi. It finally worked for me. I had to carry out few steps though. The names were one word without any space within hosts file. Check Resolve MAC addresses Check Resolve network (IP) addresses

Thanks for your kind support and looking into this.

answered 05 Oct '16, 08:38

Engineer786's gravatar image

Engineer786
6112
accept rate: 0%

The preference option you needed would have been Resolve network (IP) addresses

(05 Oct '16, 11:44) grahamb ♦