Ask Your Question

Revision history [back]

For the item you mention, the port numbers are translated to the service by looking them up in the "services" file that should be present in the Wireshark "Global configuration" directory, see Help -> About Wireshark -> Folders tab for the location.

The display of the service depends on the preference setting "Resolve transport names" in the Name Resolution section being checked.

It's also possible to create a local copy of the services file in the personal configuration or appropriate profile directory which will then override the global one.