Ask Your Question
0

Does the wireshark installer actually DL from from NA?

asked 2024-02-25 01:37:28 +0000

ITbro9001 gravatar image

updated 2024-02-25 01:40:02 +0000

Stupid question so I apologize in advance. So, I noticed that when I block certain countries traffic to my firewall, wireshark will not download. I live in the US and I block ~15 countries, inbound and outbound. Don't judge me. Anyway, I noticed that I have to disable this blocking to download from https://2.na.dl.wireshark.org, which is a NA server (5.78.100.21).

The countries I am blocking are; UAE, Afghanistan, Andorra, Albania, Bosnia, Bulgaria, Botswana, Congo, Estonia, Western Sahara, Ethiopia, Iraq, Iran, China and Hong Kong. So why would the windows wireshark DL be blocked?

I'm a noob, which I'm sure is evident, just trying to understand. Cheers.

edit retag flag offensive close merge delete

Comments

Recently changed in 19 - Downloads from mirrors are slower than www.wireshark.org

2.na.dl is now at a different hosting provider (Hetzner) and should be faster.

DNS is resolving it to a German domain but it geolocates to Portland, Oregon.

C:\Users\wireshark>nslookup 2.na.dl.wireshark.org

Non-authoritative answer:
Name:    2.na.dl.wireshark.org
Addresses:  2a01:4ff:1f0:ca4b::1
          5.78.100.21


C:\Users\wireshark>nslookup 5.78.100.21

Name:    static.21.100.78.5.clients.your-server.de
Address:  5.78.100.21
C:\Users\wireshark>tracert 5.78.100.21

Tracing route to static.21.100.78.5.clients.your-server.de [5.78.100.21]
over a maximum of 30 hops:

  1     4 ms     1 ms     1 ms  xxx
-- snip --
 12    91 ms    81 ms    81 ms  port-b5-link.ip.twelve99.net [62.115.112.43]
 13    84 ms   113 ms    81 ms  hetzner-ic-375331.ip ...
(more)
Chuckc gravatar imageChuckc ( 2024-02-25 02:41:24 +0000 )edit

1 Answer

Sort by » oldest newest most voted
0

answered 2024-02-25 13:19:51 +0000

André gravatar image

updated 2024-02-25 13:21:04 +0000

Actually you are blocking IP-ranges, not counties.
With the current shortage of IPv4 addresses, IP-ranges are traded more frequently and the buyer may be in a different country. The Geo location service you are using must then be notified of the change and update their database manually. (Assuming the buyer only uses it in a specific location or country...)

Regarding DNS naming: the (sub-)domain is just a name. It can be freely chosen (within the naming format).

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2024-02-25 01:37:28 +0000

Seen: 119 times

Last updated: Feb 25