Gilbert,
Thank you for your response.
I'm only tracking NetBIOS packets, and NetBIOS
does not use a DNS. Each machine just advertises itself periodically on the
network. Admittedly I am now on the opposite end of the coax to before, but that
shouldn't make any difference. (Unless perhaps the bits are coming out
inverted...;-:)
Doug.
----- Original Message -----
Sent: Friday, October 20, 2000 12:45
AM
Subject: Re: [Ethereal-users]
Source/Destination Display?
Let me guess... now your machine doesn't have access to the
same DNS server? This is a flaw in the way the saving of the capture file
happens. The names aren't stored anywhere. At decode time, a reverse
resolution on the addresses takes place so that the names can be
displayed. That means if you don' t have access to a DNS server, or
the same DNS server (e.g., for addresses inside a firewall), or you do have
access to DNS but the names have changed in DNS, then the decode is
different than before.
--gilbert
"doug rickard"
<rickard@xxxxxxxxxxxxx> on 10/18/2000 08:24:52 PM
To:
ethereal-users@xxxxxxxxxxxx cc: (bcc: Gilbert
Ramirez/Tivoli Systems) Subject: [Ethereal-users] Source/Destination
Display?
I am new to Ethereal having only got it going last
weekend on a Win95 laptop..
I am using Ethereal to track NetBIOS
packets on a coax LAN.
When I first started using Ethereal is was great
because it was displaying the Source and Destination in the actual machine
names, e.g. Linux, Laptop, PC3, PC4, etc. It was very easy to
follow.
Now I am still using the very same settings, but now the Source
and Destination addresses are being displayed as the actual Ethernet
addresses, or the dotted quad IP addresses. This makes interpreting the
display very difficult.
How can I get Ethereal to go back to
displaying the actual machine names for Source and
Address?
Doug.
|