Comment # 4
on bug 10337
from Jeff Morriss
What I meant (now excluding case (a) since you're doing a live capture) is:
does your trace include DNS packets that resolve the names in question?
Given that you're doing a live capture, I strongly suspect that it does. (You
can use a display filter of "dns" to see these packets.)
The difference between resolved and unresolved addresses *may* be related to
which DNS packets are actually captured but to know for sure I'd have to see a
sample trace.
If you want to disable Wireshark's usage of name resolution from DNS packets
you'd have to adjust the DNS dissector's preference to do so; see:
https://ask.wireshark.org/questions/35429/name-resolution-only-from-hosts-files-no-dns-even-from-trace
You are receiving this mail because:
- You are watching all bug changes.