Ask Your Question
0

How to use the ethers file

asked 2019-11-21 13:34:42 +0000

updated 2019-11-21 14:06:11 +0000

grahamb gravatar image

Hi, I have created an ethers file, like described in the wireshark docs and put it into a personal profile (e.g. testETHERS) Is there an additional step needed to the MAC addresses resolved? I have enabled the physical name resolving. I am using Wireshark 3.0.6 64Bit for Windows.

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted
1

answered 2019-11-21 14:23:45 +0000

grahamb gravatar image

ethers does not support a profile specific version, only the personal and global configuration directories. Some of the configuration files do, e.g. vlans, but the current state overall seems to be inconsistent and undocumented.

At the time of writing, in the current master branch, the following address resolution files can be loaded from a profile:

  • services
  • vlans
  • subnets
  • hosts
  • ss7pcs

I don't know what the state is for 3.0.6.

edit flag offensive delete link more

Comments

Ok makes sense. But I have also tried the global and personal configuration directories. But it didn’t work.

Christian_R gravatar imageChristian_R ( 2019-11-21 14:28:51 +0000 )edit

Works for me in the personal config directory with 3.1.1 dev build. In my file I had:

f3.ae.85.32.96.37 machine1
f4:d5:45:e8:aa:d2 machine2

Do you have "Resolve MAC addresses" checked in the Name Resolution Preferences?

grahamb gravatar imagegrahamb ( 2019-11-21 14:41:32 +0000 )edit

Also checked with 3.0.6 and it works for me there was well.

grahamb gravatar imagegrahamb ( 2019-11-21 15:06:54 +0000 )edit

See Bug 11228. I missed reporting the ethers file at the time. A new bug should probably be opened for ethers and any other file not currently supported per-profile.

cmaynard gravatar imagecmaynard ( 2019-11-21 16:18:14 +0000 )edit

Ok we start at the very beginning: where exactly have you stored the ethers. I have stored it in %appdata%roaming/wireshark

Christian_R gravatar imageChristian_R ( 2019-11-21 17:36:47 +0000 )edit

And Ihave also enabled the reasolve mac addresses in the preferences

Christian_R gravatar imageChristian_R ( 2019-11-21 17:38:19 +0000 )edit

Assuming %appdata% resolves to the path to your user's appdata then that seems to be the correct place. Easy to check in Wireshark using Help -> About Wireshark and select the Folders tab. You can double click on the link to open the directory in Windows Explorer.

grahamb gravatar imagegrahamb ( 2019-11-21 17:41:46 +0000 )edit

That is what I did. but obviously it does not work. Is there something other which can prevent resolving the mac addreses from the ethers file? Or needs the ethers file itsswlf something special. E.g empty row at the end?

Christian_R gravatar imageChristian_R ( 2019-11-21 19:33:33 +0000 )edit

Did you restart Wireshark after editing your ethers file? If nothing is working, I'd suggest starting with a pristine %APPDATA%\Roaming\Wireshark folder and then making your ethers file modifications. Some other TBD preference may be affecting this, or perhaps something left over from an older version of Wireshark? Just copy all your files elsewhere first so you can diff them to figure out what the issue was, and also so you can more easily restore everything, except that which is causing the problem for you, once the root cause of this problem is found.

cmaynard gravatar imagecmaynard ( 2019-11-21 19:50:29 +0000 )edit

Thx. The strange thing is that all other resolutions like host or vlans do work. I think it is something at the local system which might cause this.

Christian_R gravatar imageChristian_R ( 2019-11-22 17:19:52 +0000 )edit

I seems to be a local problem (maybe due to some security settings) . On another system ethers is working well.

Christian_R gravatar imageChristian_R ( 2019-12-05 21:45:20 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-11-21 13:34:42 +0000

Seen: 1,759 times

Last updated: Nov 21 '19