Ask Your Question
0

Why is the source address column not showing the resolved name?

asked 2020-10-17 10:22:19 +0000

updated 2020-10-17 18:08:47 +0000

Hello again,

I have IP name resolution enabled. And the source column shows up the IP-Addres instead of the name. Is there a reason to do so?

Updated Image

Thx, Christian

3.2.7 (v3.2.7-0-gfb6522d84a3a)

Compiled (64-bit) with Qt 5.12.9, with WinPcap SDK (WpdPack) 4.1.2, with GLib
2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4,
with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos,
with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with
Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic
updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled
resampler), with SBC, with SpanDSP, with bcg729.

Running on 64-bit Windows 10 (1809), build 17763, with Intel(R) Core(TM)
i7-4710MQ CPU @ 2.50GHz (with SSE4.2), with 16261 MB of physical memory, with
locale German_Germany.1252, with light display mode, without HiDPI, with Npcap
version 0.9983, based on libpcap version 1.9.1-PRE-GIT, with GnuTLS 3.6.3, with
Gcrypt 1.8.3, with brotli 1.0.2, without AirPcap, binary plugins supported (19
loaded).

Built using Microsoft Visual Studio 2019 (VC++ 14.27, build 29111).
edit retag flag offensive close merge delete

Comments

I would assume that the IP doesn't resolve. Can you resolve the IP by other methods, e.g. dig?

grahamb gravatar imagegrahamb ( 2020-10-17 13:56:18 +0000 )edit

You are right, I will update the screenshot!

Christian_R gravatar imageChristian_R ( 2020-10-17 16:32:46 +0000 )edit

Screenshot has been updated.... And makes more sense now...

Christian_R gravatar imageChristian_R ( 2020-10-17 18:11:33 +0000 )edit

FWIW you're running with an old version of npcap:

with Npcap version 0.9983

1.00 is available from their site, it is 15 builds and 14 months newer. Lots have things have been fixed.

grahamb gravatar imagegrahamb ( 2020-10-19 12:24:15 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
1

answered 2020-10-17 16:07:46 +0000

SYN-bit gravatar image

I suspect you have the "Src addr (unresolved)" in your column definition instead of "Source Address"?

edit flag offensive delete link more

Comments

The packet details doesn't show a resolved name though, hence my comment.

grahamb gravatar imagegrahamb ( 2020-10-17 16:22:28 +0000 )edit

Let me check this....

Christian_R gravatar imageChristian_R ( 2020-10-17 16:33:26 +0000 )edit

@grahamb In the packet details, the src is a RFC1918 address and is also not resolved in the dst column. It would indeed be interesting if the packet details don't show a resolved src of 94.142.246.86

SYN-bit gravatar imageSYN-bit ( 2020-10-17 17:56:59 +0000 )edit

@SYN-bit You were absolutely right as we can see in the updated screenshot. I must have manipulated this in the Profile from I have copied it.

Thx

I used it once analyse the different IPs of a GRE Trace.

Christian_R gravatar imageChristian_R ( 2020-10-17 18:10:31 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-10-17 10:22:19 +0000

Seen: 60 times

Last updated: Oct 17