This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Disable port number popular name allocation

2

Hello all,

Can anyone tell me how to stop wireshark giving the port numbers for TCP packets popular names like "ddi-tcp" and "blackjack" etc, I just want to see the port number.

Regards

Baz

asked 04 Apr '12, 08:02

Baz's gravatar image

Baz
31●2●2●4
accept rate: 0%

One Answer:

5

Sure, just disable "Name Resolution" for the "Transport Layer" in the View menu (for temporary effect), or go into the preferences and disabled it in the Name Resolutions section.

answered 04 Apr '12, 08:04

Jasper's gravatar image

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%

Thanks for that Jasper,

Can I use this method on pre captured files which I load back in to view?

Regards

Barr

(04 Apr '12, 08:09) Baz

No need to worry,

I've just fingered it out. If you change the "View" setting you have to re-load the file.

Thanks

Baz

(04 Apr '12, 08:13) Baz

If changing the "View" setting doesn't change what you see without having to reload the file, that's a bug (even if it's complicated to fix); please file a bug about that at the Wireshark Bugzilla.

(04 Apr '12, 08:32) Guy Harris ♦♦