https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4900
Summary: MAC Address Name Resolution Not Working Properly
Product: Wireshark
Version: 1.4.0
Platform: x86
OS/Version: Windows XP
Status: NEW
Severity: Normal
Priority: Low
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: Jim@xxxxxxxxxxxxxxxxx
Created an attachment (id=4813)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4813)
Capture containing 6 ARP packets from different MAC addresses
Build Information:
Version 1.4.0rc1 (SVN Rev 33190 from /trunk-1.4)
Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.16.6, (32-bit) with GLib 2.22.4, with WinPcap (version
unknown), with libz 1.2.3, without POSIX capabilities, without libpcre, with
SMI
0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.8.5, with
Gcrypt 1.4.5, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built
Jun
9 2010), with AirPcap.
Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.1
(packet.dll version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.5, without AirPcap.
Built using Microsoft Visual C++ 9.0 build 30729
--
If Wireshark 1.4.0rc1 is started with MAC name resolution off, MAC address
friendly names will not display properly until MAC name resolution is turned
on, preferences are saved, and Wireshark is restarted. Just turning MAC name
resolution on without saving and restarting doesn't work. If Wireshark is
started with MAC name resolution on, just turning MAC name resolution off will
not remove the friendly names from the display. Preferences have to be saved
and Wireshark restarted.
1. Click on Edit Preferences > Name Resolution. Uncheck "Enable MAC
resolution." Click Apply and Save and shut down Wireshark.
2. Restart Wireshark. Load the attached file, mac-names.pcap. This is a capture
file consisting of six ARP requests from different MAC addresses.
3. Click on View > Name Resolution > Enable for MAC Layer.
4. Click "Reload." The Destination address field display will change from
"ff:ff:ff:ff:ff:ff" to "Broadcast", but the source address field will still
show a numeric MAC address instead of the resolved OUI. In the Packet Details
pane, under "Ethernet II", right-click on a source MAC address and click
"Resolve name." The numeric MAC will still be shown, not the resolved OUI.
5. Go to Edit Preferences > Name Resolution. Check "Enable MAC resolution."
Apply, save, and restart Wireshark. Load the mac-names.pcap file. Now the
resolved OUIs will be shown.
6. Click View > Name Resolution, uncheck Enable for MAC Layer. Click Reload.
The resolved OUIs will still be shown; the display will not revert to the
numeric MAC address display.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.