Wireshark-bugs: [Wireshark-bugs] [Bug 11762] New: Name resolution options are non-functional for
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 24 Nov 2015 10:34:53 +0000
Bug ID 11762
Summary Name resolution options are non-functional for tshark
Product Wireshark
Version 2.0.0
Hardware All
OS All
Status UNCONFIRMED
Severity Enhancement
Priority Low
Component TShark
Assignee bugzilla-admin@wireshark.org
Reporter peter@lekensteyn.nl 

Build Information:
TShark (Wireshark) 2.1.0 (v2.1.0rc0-716-ged0cc43 from master)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, with POSIX capabilities (Linux), with libnl 3,
with libz 1.2.8, with GLib 2.46.2, without SMI, without c-ares, without ADNS,
with Lua 5.2, with GnuTLS 3.4.6, with Gcrypt 1.6.4, with MIT Kerberos, with
GeoIP.

Running on Linux 4.3.0-1-ARCH, with locale en_GB.UTF-8, with libpcap version
1.7.4, with libz 1.2.8, with GnuTLS 3.4.6, with Gcrypt 1.6.4.
Intel(R) Core(TM) i5 CPU       M 560  @ 2.67GHz (with SSE4.2)

Built using clang 4.2.1 Compatible Clang 3.7.0 (tags/RELEASE_370/final).
--
Name resolution is not working as advertised. According to the tshark manual
page (option -N), name resolution is enabled by default. But the hosts in the
tshark output are still IP addresses (-Tfields -e ip.host also shows IP
addresses).

To reproduce, try any IP capture. To rule out network resolution issues, I
tried to use a hosts file but that also does not work (only numeric addresses
are shown)

 echo 8.8.8.8 dns > hosts
 tshark -r some.pcapng.gz -Y 'ip.addr==8.8.8.8' -H hosts
 # also tried wit: -Tfields -e ip.host

Affects 2.0 too, have not tested it with earlier versions. Name resolution in
the Qt GUI does work (after modifying it via the menu).

You are receiving this mail because:
  • You are watching all bug changes.