Revision history [back]

There are quite a view elements involved in the name resolution process. Maybe my Sharkfest 2021 US virtual presentation helps in finding the cause of what is working for you.

My guess is that your configuration profile (are you using the default or did you create own?) has a hosts file that "masks" the ones you are trying. Also, the place of the hosts file is not in the plugin directories, but in the profile directories.

I tried the following myself and can confirm that that works in Wireshark-4.2.2:

• Switched to the default profile (ie, use the settings in the personal configuration folder instead of a specific profile folder)
• created a sym-link from a hosts file on my OneDrive to a hosts file in this configuration folder (~/.config/wireshark/hosts)
• Enabled network name resolution and disabled the external resolver and captured DNS packets options