 | 1 | initial version |
To my knowledge, no. Neither wireshark.net nor dl1.wioreshark.net are affiliated with Wireshark. The only legitimate download servers I'm aware of are listed at https://www.wireshark.org/download.html#spelunking, and they currently only include the following:
Personally, unless you're aware of some other legitimate reason for those devices contacting those sites - and judging by your question here, that doesn't appear to be the case - then I'd block access to them.
| | 2 | No.2 Revision |
To my knowledge, no. Neither wireshark.net nor dl1.wioreshark.net are affiliated with Wireshark. The only legitimate download servers I'm aware of are listed at https://www.wireshark.org/download.html#spelunking, and they currently only include the following:
Personally, unless you're aware of some other legitimate reason for those devices contacting those sites - and judging by your question here, that doesn't appear to be the case - then I'd block access to them.
EDIT: Well, according to a whois lookup, it does appear that the registrant organization is the Wireshark Foundation after all:
Registrant Organization: Wireshark Foundation, Inc.
Still, I can't think of a valid reason why any device should be attempting to contact that domain instead of wireshark.org or any of those listed above. (And I assume dl1.wioreshark.net was a typo and you meant dl1.wireshark.net ?)