Wireshark-bugs: [Wireshark-bugs] [Bug 10212] New: IP Address appears in place of friendly MAC ad

Date: Fri, 20 Jun 2014 06:10:29 +0000
Bug ID 10212
Summary IP Address appears in place of friendly MAC address OUI
Classification Unclassified
Product Wireshark
Version 1.99.x (Experimental)
Hardware x86
OS Windows Vista
Status UNCONFIRMED
Severity Normal
Priority Low
Component GTK+ UI
Assignee [email protected]
Reporter [email protected]

Created attachment 12830 [details]
Screen shot showing IP address in place of resolved OUI in Packet Details pane

Build Information:
Version 1.99.0-465-gdf93705 (v1.99.0-rc1-465-gdf93705 from master)

Copyright 1998-2014 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with Qt 5.1.1 with GLib 2.38.0, with WinPcap (4_1_3), with
libz 1.2.5, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.2, with GnuTLS
3.1.22,
with Gcrypt 1.6.0, with MIT Kerberos, with GeoIP, without PortAudio, with
AirPcap.

Running on 32-bit Windows Vista Service Pack 2, build 6002, without WinPcap,
GnuTLS 3.1.22, Gcrypt 1.6.0, without AirPcap.
AMD Athlon(tm) 64 X2 Dual Core Processor 4000+, with 1917MB of physical memory.


Built using Microsoft Visual C++ 10.0 build 40219

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
With the following combination of settings:

Resolve MAC addresses: On
Resolve network (IP) addresses: On
Use an external network name resolver: On

When the IPv4 address does not resolve to a host name, then the IP address
appears where the resolved MAC address OUI should appear in the Ethernet
portion of the Packet Details pane. See the attached screen shot.

I have seen this with addresses in the 10.0.0.0/8 and 192.168.0.0/16 ranges. I
assume that it is true for any IP address that does not resolve to a host name.

This behavior is also present in 1.10.8 GTK+.


You are receiving this mail because:
  • You are watching all bug changes.