Is there any way to SAVE manually resolved addresses to LOAD them next time Wireshark runs?
asked 22 Feb '12, 09:21
edited 23 Feb '12, 17:18
You can create a hosts file and put it in the Wireshark configuration directory. This file follows the same format as the standard Windows or UNIX hosts file. Wireshark will read this file at startup and will use it as long as network name resolution is enabled.
Note that Wireshark will only read this file at startup, so if you make changes while Wireshark is running, you will need to shut down Wireshark and restart for the changes to take effect.
See Preferences/Name Resolution on the Wireshark Wiki.
answered 23 Feb '12, 10:57
edited 23 Feb '12, 11:23
With the development version using pcap-ng file format - yes.
answered 22 Feb '12, 11:42