Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Resolution of Network address

I have a captured file. When I enable "Resolve Network Addresses" I can see the names in the "Source" and "Destination" field. When I disable the option the IP addresses are seen. This is expected. However, my question is how does it resolve the IP addresses ? In command window when I do "nslookup <captured ip="">" one of them works, the other one does not return any name. The how does wireshark resolve both of those?