Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 658] Ethereal Filter "ip.dst == 1" (or alike) hangs Ethere

Date: Thu, 13 Aug 2009 10:47:22 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=658


Eric Conrad <e-bugzilla@xxxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |e-bugzilla@xxxxxxxxxxxxx
         OS/Version|Windows XP                  |Ubuntu
            Version|1.0.4                       |1.2.1




--- Comment #17 from Eric Conrad <e-bugzilla@xxxxxxxxxxxxx>  2009-08-13 10:47:20 PDT ---
I have confirmed this bug with Wireshark 1.2.1

If you type 'ip.addr = 192.' in the display filter field, wireshark makes
a DNS request for '192' as soon as you type the '.'

This is true even with 'Enable network name resolution' and 'enable concurrent
DNS name resolution' disabled.

When I work with a network connection, there is no delay.  When I disconnect my
ethernet cable, the delay is quite painful.  Then the delay ends, but begins
again when I type the 2nd part of the IP: 'ip.addr = 192.168.'

At that point, wireshark tries to resolve '192.168', and they delay hits again.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.