Ask Your Question
0

How exactly does tshark -z hosts come up with the list?

asked 2019-05-29 12:23:16 +0000

jtanski gravatar image

How exactly does tshark -z hosts come up with the hosts list?

The man page says "Addresses are collected from a number of sources, including standard "hosts" files and captured traffic.".

I am curious to understand what the sources would be. I would assume DNS packets, maybe Windows Netbios or newer Windows protocols?

Thanks.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-05-30 17:57:06 +0000

Guy Harris gravatar image

Just DNS packets, from a quick look at the code; we don't use NBNS traffic to get NetBIOS names.

edit flag offensive delete link more

Comments

Thank you, makes sense.

jtanski gravatar imagejtanski ( 2019-05-30 18:18:13 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-05-29 12:23:16 +0000

Seen: 322 times

Last updated: May 30 '19