On Fri, Oct 27, 2000 at 11:30:19AM -0400, Timothy Reaves wrote:
> I'm trying to filter a capture. I'm wanting to look at all the
> traffic to and from a particular machine. When I enter the filter
> string and hit enter, I get the message
>
> Ethereal: Warning
> "10-180.neo.rr.com" isn't a valid host name or IP address
What happens if you do
nslookup 10-180.neo.rr.com
from the command line (at least on most UNIXes and NT; I've no idea
whether Windows 9x has "nslookup")?
If it fails, then it appears that...
> yet I copied this directly from the capture.
Where did it appear in the capture? If it appeared as text, rather than
as an IP address, it may be that the machine on which the capture was
made somehow had that host name, but that, at the time Ethereal ran, the
machine running Ethereal was unable to translate that name to an IP
address, due to a DNS failure.
Attempts to look up "10-180.neo.rr.com" here failed dismally. The DNS
servers for "rr.com" are, apparently, "dns1.rr.com", "dns2.rr.com", and
"dns3.rr.com". "dns1.rr.com" says the DNS servers for "neo.rr.com" are
"akron3.neo.lrun.com", "birdseed.neo.lrun.com", and
"dynamite.neo.lrun.com".
"akron3.neo.lrun.com" failed to respond to an attempt to look up a
record for "neo.lrun.com". (That's "failed to respond" as in "I got a
timeout message from nslookup".)
"birdseed.neo.lrun.com" claims that the DNS servers for "neo.rr.com" are
"akron3.neo.lrun.com" and "akron5.neo.lrun.com".
"dynamite.neo.lrun.com" makes the same claim.
"akron3.neo.lrun.com" doesn't appear to work. "akron5.neo.lrun.com"
does appear to work, and returns information for "neo.rr.com"; however,
it returns "Non-existent host/domain" for "10-180.neo.rr.com".