Disable port number popular name allocation

2	Hello all, Can anyone tell me how to stop wireshark giving the port numbers for TCP packets popular names like "ddi-tcp" and "blackjack" etc, I just want to see the port number. Regards Baz popular allocation disable port name asked 04 Apr '12, 08:02 Baz 31●2●2●4 accept rate: 0%

One Answer:

active answers oldest answers newest answers popular answers

Sure, just disable "Name Resolution" for the "Transport Layer" in the View menu (for temporary effect), or go into the preferences and disabled it in the Name Resolutions section.

permanent link

answered 04 Apr '12, 08:04

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%

Thanks for that Jasper,

Can I use this method on pre captured files which I load back in to view?

Regards

Barr

(04 Apr '12, 08:09) Baz

No need to worry,

I've just fingered it out. If you change the "View" setting you have to re-load the file.

Thanks

Baz

(04 Apr '12, 08:13) Baz

If changing the "View" setting doesn't change what you see without having to reload the file, that's a bug (even if it's complicated to fix); please file a bug about that at the Wireshark Bugzilla.

(04 Apr '12, 08:32) Guy Harris ♦♦

Your answer

toggle preview

community wiki:

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Question tags:

port ×69
name ×34
disable ×14
allocation ×2
popular ×1

question asked: 04 Apr '12, 08:02

question was seen: 22,752 times

last updated: 04 Apr '12, 08:32

Disable port number popular name allocation

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions