http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2437
Guy Harris <guy@xxxxxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
Platform|PC |All
--- Comment #1 from Guy Harris <guy@xxxxxxxxxxxx> 2008-04-09 19:22:58 GMT ---
> 1) Hardware src addr <=> Hw src addr (resolved)
> 2) Hardware dest addr <=> Hw dest addr (resolved)
> 3) Source port <=> Src port (resolved)
> 4) Destination port <=> Dest port (resolved)
They're not *supposed* to be the same; "Hardware src addr" is supposed to show
the resolved address if MAC-layer address resolution is enabled and the
unresolved address if it's not enabled. "Enabled" and "disabled" here mean
enabled or disabled by the preferences file, the "-n" or "-N" flags, or the
"Name resolution" item in the View menu.
If that doesn't work, that's a bug.
> 5) Source address <=> Src addr (resolved) <=> Network src addr <=> Net src addr (resolved)
> 6) Destination address <=> Dest addr (resolved) <=> Network dest addr <=> Net dest addr (resolved)
> 7) Src addr (unresolved) <=> Net src addr (unresolved)
> 8) Dest addr (unresolved) <=> Net dest addr (unresolved)
"Source address" and "destination address" fields should show the network
address if the packet *has* a network address and the MAC address if the packet
doesn't have a network address.
If that doesn't work, that's a bug. (It works in at least one capture I have;
ARP packets show the MAC source and destination address, and DHCP and OSPF
packets show the IPv4 source and destination addresses.
The "XXX (resolved)" versus "XXX" issues are as above.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
