Wireshark · Wireshark-users: Re: [Wireshark-users] Relabeling or defining "aliases" to packets

["Jeroen Eeuwes" <jeroeneeuwes@xxxxxxxxx>]

Hi Corey,

> We only have two entries to start. We tried reloading the open
> capture file using "view, reload" and we also closed and reloaded
> Wireshark and then re-opened the capture file. Each time the
> packets containing the IP address are still listed as the IP
> address and not as "backbone_router".

I don't have Vista so I don't know if you've got the right directory.
This can be checked by opening a cmd shell (does that still exist in
Vista?) and type echo %APPDATA%.
As far as I know you have to restart Wireshark if you change the
"personal hosts" file.

Anyway, the most likely reason you are not seeing the names is that
name-resolution is default off. To turn it on you should go to Edit ->
Preferences. Then select "Name resolution" on the left-hand side and
put a checkmark after "enable network name resolution" option on the
right. You'll have to close the capture file and reload it.

Best regards,
Jeroen Eeuwes