


Resolver to convert an IP address to the hostname associated with it Try to resolve an IP address (e.g., 216.239.37.99) to a human readable name.ĭNS name resolution (system/library service): Wireshark will use a name The same sort of thing can happen when capturing over a remote connection, e.g., SSH or RDP.ħ.9.3. IP Name Resolution (Network Layer) You might run into the observer effect if the extra traffic from Wireshark’s DNS queries and responses affects the problem you’re trying to troubleshoot or any subsequent analysis. (e.g., 216.239.37.99 → Most applications use synchronously DNS name resolution.įor example, your web browser must resolve the host name portion of a URL before it can connect to the server.Ī given file might have hundreds, thousands, or millions of IP addresses so for usability and performance reasons Wireshark uses asynchronous resolution.īoth mechanisms convert IP addresses to human readable (domain) names and typically use different sources such as the system hosts file ( /etc/hosts) and any configured DNS servers.
