Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 7380] Only use Hosts file or Address Resolution block for

Date: Wed, 11 Jul 2012 09:56:18 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7380

--- Comment #15 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2012-07-11 09:56:18 PDT ---
(In reply to comment #12)
> OK, so it sounds as if there are several possible IP-to-name resolution modes:
> 
>     1) don't resolve any names;

[...]

> Is there any reason why 1) would be useful?  In the packet details, items
> normally either give only the address or give the address and whatever host
> name it resolves to, so it's not as if you need to select "don't resolve any
> names" to get the IP address (if there are any cases where a dissector puts
> *only* the resolved name into the display, that's a deficiency in the
> dissector).  In the packet summary, you could choose a column that displays
> only the unresolved address - and we might want to consider making it easier to
> switch columns for resolvable values beetween "resolved" and "unresolved".

The existing code seems to go to some length to allow people to see just IP
addresses, even if we can resolve the name. For example:

~~~
  hashipv4_t *tp = host_lookup(addr, &found);  <<< may resolve the name even if
name resolution is disabled

  if (!gbl_resolv_flags.network_name)
    return tp->ip; <<< return the IP address

  return tp->name;  <<< return the hostname
~~~

But, when you put it that way (quoted above), I tend to agree that there's no
need to have a separate "do network name resolution" option.  Hmmm...  We could
always take it out and see if anybody screams.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.