Ethereal-users: Re: [Ethereal-users] Source/Destination Display?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Thu, 19 Oct 2000 09:45:30 -0500
Let me guess... now your machine doesn't have access to the same DNS
server? This is a flaw in the way the saving of the capture file happens.
The names aren't stored anywhere. At decode time, a reverse resolution on
the addresses takes place so that the names can be displayed.  That means
if you don' t have access to a DNS server, or the same DNS server (e.g.,
for addresses inside a firewall), or you do have access to DNS but the
names have changed in DNS, then the decode is different than before.

--gilbert

"doug rickard" <rickard@xxxxxxxxxxxxx> on 10/18/2000 08:24:52 PM

To:   ethereal-users@xxxxxxxxxxxx
cc:    (bcc: Gilbert Ramirez/Tivoli Systems)
Subject:  [Ethereal-users] Source/Destination Display?




I am new to Ethereal having only got it going last weekend on a Win95
laptop..

I am using Ethereal to track NetBIOS packets on a coax LAN.

When I first started using Ethereal is was great because it was displaying
the Source and Destination in the actual machine names, e.g. Linux, Laptop,
PC3, PC4, etc. It was very easy to follow.

Now I am still using the very same settings, but now the Source and
Destination addresses are being displayed as the actual Ethernet addresses,
or the dotted quad IP addresses. This makes interpreting the display very
difficult.

How can I get Ethereal to go back to displaying the actual machine names
for Source and Address?

Doug.
I am new to Ethereal having only got it going last weekend on a Win95 laptop..
 
I am using Ethereal to track NetBIOS packets on a coax LAN.
 
When I first started using Ethereal is was great because it was displaying the Source and Destination in the actual machine names, e.g. Linux, Laptop, PC3, PC4, etc. It was very easy to follow.
 
Now I am still using the very same settings, but now the Source and Destination addresses are being displayed as the actual Ethernet addresses, or the dotted quad IP addresses. This makes interpreting the display very difficult.
 
How can I get Ethereal to go back to displaying the actual machine names for Source and Address?
 
Doug.