Wireshark-users: Re: [Wireshark-users] Changing the display fields
From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Fri, 3 Jul 2009 13:02:38 -0600
There is the advantage that if you leave concurrent DNS lookups turned on in the name resolution preferences, DNS lookups will be non-blocking. This means that Wireshark submits the request to the c-ares or adns library to do a lookup but continues capturing and displaying packets. When the c-ares/adns library returns the result, Wireshark uses it from then on. On Fri, Jul 03, 2009 at 06:09:34AM +0200, j.snelders@xxxxxxxxxx wrote: > Yes, of course. > > Cheers > Joan > > >-- Oorspronkelijk bericht -- > >From: "Kondal Rao" <kondal04@xxxxxxxxx> > >To: "'Community support list for Wireshark'" <wireshark-users@xxxxxxxxxxxxx> > >Date: Thu, 2 Jul 2009 15:06:38 -0700 > >Subject: Re: [Wireshark-users] Changing the display fields > >Reply-To: Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx> > > > > > >Hi, > > > >This is good, but wouldn't it slow down the capture/display because of the > >name resolution? > > > >-KK > > > >-----Original Message----- > >From: wireshark-users-bounces@xxxxxxxxxxxxx > >[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of > >j.snelders@xxxxxxxxxx > >Sent: Thursday, July 02, 2009 1:39 PM > >To: Community support list for Wireshark > >Subject: Re: [Wireshark-users] Changing the display fields > > > >Hi, > > > >Yes, it's possible. > >http://www.wireshark.org/docs/man-pages/wireshark.html: > >Name Resolution (hosts) > >If the personal hosts file exists, it is used to resolve IPv4 and IPv6 > >addresses > >before any other attempts are made to resolve them. The file has the > >standard > >hosts file syntax; each line contains one IP address and name, separated > >by whitespace. The same directory as for the personal preferences file is > >used. > > > >BTW > >You have to enable network name resolution: > >Edit -> Preferences -> Name Resolution. > >Qiut and lauch Wireshark again. > > > >HTH > >Joan > > > > > >On Thu, 2 Jul 2009 11:59:09 -0700 Kondal Rao wrote: > > > >>Hi, > >> > >>I'm trying to change the display information in the list of packet capture, > >>like changing the "source ip address" to some meaningful text like "Client > >>01". > >> > >>How do I do this? > >> > >>I see that filters would not be helpful, so some lua script should able > >to > >>do. But could not find sufficient information on this. > >> > >>Help me on this. > > > >> > >>Thank you, > > > > > > > > > > > > > >___________________________________________________________________________ > >Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx> > >Archives: http://www.wireshark.org/lists/wireshark-users > >Unsubscribe: https://wireshark.org/mailman/options/wireshark-users > > > >mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe > > > >___________________________________________________________________________ > >Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx> > >Archives: http://www.wireshark.org/lists/wireshark-users > >Unsubscribe: https://wireshark.org/mailman/options/wireshark-users > > mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe > > > > > > ___________________________________________________________________________ > Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx> > Archives: http://www.wireshark.org/lists/wireshark-users > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users > mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
- References:
- Re: [Wireshark-users] Changing the display fields
- From: Kondal Rao
- Re: [Wireshark-users] Changing the display fields
- From: j . snelders
- Re: [Wireshark-users] Changing the display fields
- Prev by Date: Re: [Wireshark-users] Changing the display fields
- Next by Date: [Wireshark-users] Using Ethereal and P2P program at the same time?
- Previous by thread: Re: [Wireshark-users] Changing the display fields
- Next by thread: [Wireshark-users] Using Ethereal and P2P program at the same time?
- Index(es):