| Bug ID |
11762
|
| Summary |
Name resolution options are non-functional for tshark
|
| Product |
Wireshark
|
| Version |
2.0.0
|
| Hardware |
All
|
| OS |
All
|
| Status |
UNCONFIRMED
|
| Severity |
Enhancement
|
| Priority |
Low
|
| Component |
TShark
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Build Information:
TShark (Wireshark) 2.1.0 (v2.1.0rc0-716-ged0cc43 from master)
Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with libpcap, with POSIX capabilities (Linux), with libnl 3,
with libz 1.2.8, with GLib 2.46.2, without SMI, without c-ares, without ADNS,
with Lua 5.2, with GnuTLS 3.4.6, with Gcrypt 1.6.4, with MIT Kerberos, with
GeoIP.
Running on Linux 4.3.0-1-ARCH, with locale en_GB.UTF-8, with libpcap version
1.7.4, with libz 1.2.8, with GnuTLS 3.4.6, with Gcrypt 1.6.4.
Intel(R) Core(TM) i5 CPU M 560 @ 2.67GHz (with SSE4.2)
Built using clang 4.2.1 Compatible Clang 3.7.0 (tags/RELEASE_370/final).
--
Name resolution is not working as advertised. According to the tshark manual
page (option -N), name resolution is enabled by default. But the hosts in the
tshark output are still IP addresses (-Tfields -e ip.host also shows IP
addresses).
To reproduce, try any IP capture. To rule out network resolution issues, I
tried to use a hosts file but that also does not work (only numeric addresses
are shown)
echo 8.8.8.8 dns > hosts
tshark -r some.pcapng.gz -Y 'ip.addr==8.8.8.8' -H hosts
# also tried wit: -Tfields -e ip.host
Affects 2.0 too, have not tested it with earlier versions. Name resolution in
the Qt GUI does work (after modifying it via the menu).
You are receiving this mail because:
- You are watching all bug changes.