Guy Harris wrote:
richard.jackson@xxxxxxxxxx wrote:
Is there any way to make the name resolution use the hosts file on the
machine where ethereal is running?
On what OS are you running Ethereal, and what version of Ethereal are
you running?
When translating host names to addresses (e.g., in capture and display
filters), Ethereal uses "gethostbyname()". On some systems that can
probably be configured not to use the hosts file, but that's not the way
it's configured by default, so it should be using the hosts file.
On *nixes the databases searched and the order is which they are
searched is configureable. On Linux and Solaris it is /etc/nsswitch.conf
and on AIX /etc/netsvc.conf
Others left as an excercise for the reader. Examples:
hosts: files dns
networks: files dns
and
hosts: files nisplus nis dns
networks: nisplus [NOTFOUND=return] files
When translating IP addresses to host names:
If you have a version of Ethereal without GNU ADNS support, or if you've
disabled GNU ADNS support (by turning off the "Enable concurrent DNS
name resolution" preference in the "Name resolution" preferences),
Ethereal will use "gethostbyaddr()" to resolve addresses in packets. On
some systems that can probably be configured not to use the hosts file,
but that's not the way it's configured by default, so it should use the
hosts file.
If you have a version of Ethereal with GNU ADNS support, and GNU ADNS
support is enabled:
In releases prior to 0.10.8, only GNU ADNS would be used - the hosts
file wouldn't be used.
In 0.10.8 and later, the hosts file should be used as well as GNU ADNS.
--
There's no point in being grown up if you can't be childish sometimes.
-- Dr. Who