 | 1 | initial version |
To resolve IP's to names requires looking up those names, they can come from a number of sources, a local file, a local DNS resolver (which may have some items cached) or another DNS resolver elsewhere.
Regardless of how it's done, anything other than a local file (or local cache) will take some time to recursively resolve the names to IP's and with many names, this will take some time, this is the reason the box is unchecked by default.
By default Wireshark will use an asynchronous internal DNS resolver (C-Ares) and allow up to 500 concurrent requests. This can be adjusted in the Preferences -> Name Resolution options.
More information about Name Resolution can be found in the User Guide.
