Wireshark-users: Re: [Wireshark-users] Relabeling or defining "aliases" to packets

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Sun, 23 Dec 2007 20:51:20 -0700
Wireshark also has a personal hosts file.  Check the man page for
details (or a copy in your web browser by going to Help - Manual Pages -
Wireshark) for more details.  The location of this hosts file can be
found in Help - About - [Folders] tab under "Personal configuration."

On Mon, Dec 24, 2007 at 12:59:29AM +0100, Jaap Keuter wrote:
> Hi,
> 
> Isn't this what /etc/hosts is for?
> 
> Thanx,
> Jaap
> 
> ColfaxNet Support wrote:
> > Wireshark.....wonderful tool!!
> >  
> > Is there a way to define labels for packets that meet certain 
> > criteria and have them labeled in the capture display?
> >  
> > For example, packets that contain IP address 1.2.3.4 could have the IP 
> > address (1.2.3.4) replaced with a label of our chosing i.e. test 
> > computer, etc. This may also be used for MAC address, etc.
> >  
> > Once something about a packet is identified, we could then label the 
> > packets that contain the same criteria as a name such as "test 
> > computer", etc. This would make is much easier to be able to glance at 
> > the capture window and to determine what device is creating that 
> > particular packet. This labeling would also be able to be viewed in the 
> > different report screens.
> >  
> > One of the other capture programs calls this function creating an alias.
> >  
> > Your thoughts and efforts are greatly appreciated.
> >  
> > Corey
> > support@xxxxxxxxxxxxx <mailto:support@xxxxxxxxxxxxx>
> >  
> 
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users