[prev in list] [next in list] [prev in thread] [next in thread]
List: wireshark-users
Subject: Re: [Wireshark-users] Name resolution updates
From: "Dignam, Mark" <Mark.Dignam () ee ! co ! uk>
Date: 2017-10-12 15:17:06
Message-ID: 96924EEDBAE5E24C8C7B9AD7DF635B9B13D49F48 () UK30S005EXS03 ! EEAD ! EEINT ! CO ! UK
[Download RAW message or body]
[Attachment #2 (text/plain)]
Thank you for your response
I have only ever used the default profile so I checked what you said. What I probably \
didn't mention was that I can see some IP addresses that are resolved already but if \
I edit the hosts file and add in new IP I can see and reload, it is these new \
additions that aren't resolved. It's as if the host file I'm editing is not the hosts \
file that is being read from the app.
Mark Dignam
From: Wireshark-users [mailto:wireshark-users-bounces@wireshark.org] On Behalf Of \
Maynard, Chris
Sent: 12 October 2017 15:15
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Name resolution updates
This might be due to you editing the file(s) in %APPDATA%\Wireshark but using a \
different Profile other than the Default profile. Check which profile you're using \
and be sure to edit the file(s) applicable to that profile or try switching to the \
Default Profile. Most (all?) configuration files are profile-specific. The \
lower-right corner of the bottom status bar will indicate the Profile, and if you \
click it, you can also easily switch profiles too. You can also select the profile \
from "Edit -> Configuration Profiles…".
- Chris
From: Wireshark-users [mailto:wireshark-users-bounces@wireshark.org] On Behalf Of \
Dignam, Mark
Sent: Thursday, October 12, 2017 8:02 AM
To: wireshark-users@wireshark.org<mailto:wireshark-users@wireshark.org>
Subject: [Wireshark-users] Name resolution updates
I have a problem with the name resolution that is puzzling me. I do have a "hosts" \
file that is populated and I also use the "ss7pcs" file for Point code resolution, \
these are both saved in the C:\Users\[USERACCOUNT]\AppData\Roaming\Wireshark \
directory.
The issues that have been observed are:
The hosts resolution works but I'm unable to view updated hosts that have been added \
to the "hosts" file even after I restart wireshark. The ss7pcs file is populated but \
this is not being resolved, I have selected the tab to resolve ss7 PC's in \
Preferences as is the case with the hosts as well.
I need to add that this is not the case for others in my office and seems to be \
isolated to my install. I have upgraded to the version 2.4.2 on Windows7 and I've \
also tried to remove the whole application and do a re-install.
I'm wondering if anyone has had the same experience and figured out how to get this \
working?
Mark Dignam
NOTICE AND DISCLAIMER
This email contains BT information, which may be privileged or confidential. It's \
meant only for the individual(s) or entity named above. If you're not the intended \
recipient, note that disclosing, copying, distributing or using this information is \
prohibited. If you've received this email in error, please let me know immediately on \
the email address above. Thank you.
We monitor our email system, and may record your emails.
EE Limited
Registered office:Trident Place, Mosquito Way, Hatfield, Hertfordshire, AL10 9BW
Registered in England no: 02382161
EE Limited is a wholly owned subsidiary of:
British Telecommunications plc
Registered office: 81 Newgate Street London EC1A 7AJ
Registered in England no: 1800000
CONFIDENTIALITY NOTICE: This message is the property of International Game Technology \
PLC and/or its subsidiaries and may contain proprietary, confidential or trade secret \
information. This message is intended solely for the use of the addressee. If you \
are not the intended recipient and have received this message in error, please delete \
this message from your system. Any unauthorized reading, distribution, copying, or \
other use of this message or its attachments is strictly prohibited.
NOTICE AND DISCLAIMER
This email contains BT information, which may be privileged or confidential. It's \
meant only for the individual(s) or entity named above. If you're not the intended \
recipient, note that disclosing, copying, distributing or using this information is \
prohibited. If you've received this email in error, please let me know immediately \
on the email address above. Thank you.
We monitor our email system, and may record your emails.
EE Limited
Registered office:Trident Place, Mosquito Way, Hatfield, Hertfordshire, AL10 9BW
Registered in England no: 02382161
EE Limited is a wholly owned subsidiary of:
British Telecommunications plc
Registered office: 81 Newgate Street London EC1A 7AJ
Registered in England no: 1800000
[Attachment #3 (text/html)]
<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"> <head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#002060;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Thank you for your response <o:p>
</o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I have only ever used the default \
profile so I checked what you said. What I probably didn't mention was that I can see \
some IP addresses that are resolved already but if I edit the hosts file and add in \
new IP I can see and reload, it is these new additions that aren't resolved. It's as \
if the host file I'm editing is not the hosts file that is being read from the \
app.<o:p></o:p></span></p> <p class="MsoNormal"><span \
style="color:#1F497D"><o:p> </o:p></span></p> <div>
<p class="MsoNormal"><b><span \
style="color:#666666;background:white"><o:p> </o:p></span></b></p> <p \
class="MsoNormal"><b><span \
style="font-size:14.0pt;font-family:"Arial","sans-serif";color:#666666;background:white">Mark \
Dignam</span></b><span \
style="font-size:10.5pt;font-family:"Arial","sans-serif";color:#666666"><br>
<br>
</span><span style="font-family:"Arial","sans-serif";color:#666666"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" \
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span \
lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> \
Wireshark-users [mailto:wireshark-users-bounces@wireshark.org] <b>On Behalf Of \
</b>Maynard, Chris<br> <b>Sent:</b> 12 October 2017 15:15<br>
<b>To:</b> Community support list for Wireshark<br>
<b>Subject:</b> Re: [Wireshark-users] Name resolution updates<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#002060">This might be due to \
you editing the file(s) in </span><span lang="EN-US" style="font-family:"Courier \
New","serif";color:#002060">%APPDATA%\Wireshark</span><span \
lang="EN-US" style="color:#002060"> but using a different Profile other than the \
Default profile. Check which profile you're using and be sure to edit the \
file(s) applicable to that profile or try switching to the Default Profile. \
Most (all?) configuration files are profile-specific. The lower-right corner of \
the bottom status bar will indicate the Profile, and if you click it, you can also \
easily switch profiles too. You can also select the profile from <i>"Edit \
-> Configuration Profiles…"</i>.<o:p></o:p></span></p> <p \
class="MsoNormal"><span lang="EN-US" \
style="color:#002060"><o:p> </o:p></span></p> <div>
<p class="MsoNormal"><span lang="EN-US" style="color:#002060">- \
Chris<o:p></o:p></span></p> </div>
<p class="MsoNormal"><span lang="EN-US" \
style="color:#002060"><o:p> </o:p></span></p> <div \
style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"> <div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> \
Wireshark-users [<a href="mailto:wireshark-users-bounces@wireshark.org">mailto:wireshark-users-bounces@wireshark.org</a>]
<b>On Behalf Of </b>Dignam, Mark<br>
<b>Sent:</b> Thursday, October 12, 2017 8:02 AM<br>
<b>To:</b> <a href="mailto:wireshark-users@wireshark.org">wireshark-users@wireshark.org</a><br>
<b>Subject:</b> [Wireshark-users] Name resolution updates<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal">I have a problem with the name resolution that is puzzling me. I \
do have a "hosts" file that is populated and I also use the "ss7pcs" file for Point \
code resolution, these are both saved in the \
C:\Users\[USERACCOUNT]\AppData\Roaming\Wireshark directory.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The issues that have been observed are:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The hosts resolution works but I'm unable to view updated hosts \
that have been added to the "hosts" file even after I restart \
wireshark.<o:p></o:p></p> <p class="MsoNormal">The ss7pcs file is populated but this \
is not being resolved, I have selected the tab to resolve ss7 PC's in Preferences as \
is the case with the hosts as well.<o:p></o:p></p> <p \
class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal">I need to add that this \
is not the case for others in my office and seems to be isolated to my install. I \
have upgraded to the version 2.4.2 on Windows7 and I've also tried to remove the \
whole application and do a re-install.<o:p></o:p></p> <p \
class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal">I'm wondering if anyone \
has had the same experience and figured out how to get this working? <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span \
style="color:#666666;background:white"><o:p> </o:p></span></b></p> <p \
class="MsoNormal" style="margin-bottom:12.0pt"><b><span \
style="font-size:14.0pt;font-family:"Arial","sans-serif";color:#666666;background:white">Mark \
Dignam</span></b><span \
style="font-family:"Arial","sans-serif";color:#666666;background:white"><o:p></o:p></span></p>
<p class="MsoNormal"><span \
style="font-family:"Arial","sans-serif";color:#666666;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span \
style="font-family:"Arial","sans-serif";color:#666666"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p>NOTICE AND DISCLAIMER<br>
This email contains BT information, which may be privileged or confidential. It's \
meant only for the individual(s) or entity named above. <br>
If you're not the intended recipient, note that disclosing, copying, distributing or \
using this information is prohibited. <br>
If you've received this email in error, please let me know immediately on the email \
address above. Thank you.<o:p></o:p></p> <p>We monitor our email system, and may \
record your emails.<o:p></o:p></p> <p>EE Limited <br>
Registered office:Trident Place, Mosquito Way, Hatfield, Hertfordshire, AL10 9BW<br>
Registered in England no: 02382161<o:p></o:p></p>
<p>EE Limited is a wholly owned subsidiary of:<o:p></o:p></p>
<p>British Telecommunications plc<br>
Registered office: 81 Newgate Street London EC1A 7AJ<br>
Registered in England no: 1800000<o:p></o:p></p>
</div>
<p><span lang="EN-US">CONFIDENTIALITY NOTICE: This message is the property of \
International Game Technology PLC and/or its subsidiaries and may contain \
proprietary, confidential or trade secret information. This message is intended \
solely for the use of the addressee. If you are not the intended recipient and \
have received this message in error, please delete this message from your system. Any \
unauthorized reading, distribution, copying, or other use of this message or its \
attachments is strictly prohibited.<o:p></o:p></span></p> </div>
<P>NOTICE AND DISCLAIMER<BR>This email contains BT information, which may be
privileged or confidential. It's meant only for the individual(s) or entity
named above. <BR>If you're not the intended recipient, note that disclosing,
copying, distributing or using this information is prohibited. <BR>If you've
received this email in error, please let me know immediately on the email
address above. Thank you.</P>
<P>We monitor our email system, and may record your emails.</P>
<P>EE Limited <BR>Registered office:Trident Place, Mosquito Way, Hatfield,
Hertfordshire, AL10 9BW<BR>Registered in England no: 02382161</P>
<P>EE Limited is a wholly owned subsidiary of:</P>
<P>British Telecommunications plc<BR>Registered office: 81 Newgate Street London
EC1A 7AJ<BR>Registered in England no: 1800000</P>
</body>
</html>
[Attachment #4 (unknown)]
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@wireshark.org?subject=unsubscribe
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic