Wireshark-bugs: [Wireshark-bugs] [Bug 4900] New: MAC Address Name Resolution Not Working Properl
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 21 Jun 2010 14:28:37 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4900

           Summary: MAC Address Name Resolution Not Working Properly
           Product: Wireshark
           Version: 1.4.0
          Platform: x86
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: Jim@xxxxxxxxxxxxxxxxx


Created an attachment (id=4813)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4813)
Capture containing 6 ARP packets from different MAC addresses

Build Information:
Version 1.4.0rc1 (SVN Rev 33190 from /trunk-1.4)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.16.6, (32-bit) with GLib 2.22.4, with WinPcap (version
unknown), with libz 1.2.3, without POSIX capabilities, without libpcre, with
SMI
0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.8.5, with
Gcrypt 1.4.5, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built
Jun
 9 2010), with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.1
(packet.dll version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.5, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 30729


--
If Wireshark 1.4.0rc1 is started with MAC name resolution off, MAC address
friendly names will not display properly until MAC name resolution is turned
on, preferences are saved, and Wireshark is restarted. Just turning MAC name
resolution on without saving and restarting doesn't work. If Wireshark is
started with MAC name resolution on, just turning MAC name resolution off will
not remove the friendly names from the display. Preferences have to be saved
and Wireshark restarted.

1. Click on Edit Preferences > Name Resolution. Uncheck "Enable MAC
resolution." Click Apply and Save and shut down Wireshark.

2. Restart Wireshark. Load the attached file, mac-names.pcap. This is a capture
file consisting of six ARP requests from different MAC addresses.

3. Click on View > Name Resolution > Enable for MAC Layer.

4. Click "Reload." The Destination address field display will change from
"ff:ff:ff:ff:ff:ff" to "Broadcast", but the source address field will still
show a numeric MAC address instead of the resolved OUI. In the Packet Details
pane, under "Ethernet II", right-click on a source MAC address and click
"Resolve name." The numeric MAC will still be shown, not the resolved OUI.

5. Go to Edit Preferences > Name Resolution. Check "Enable MAC resolution."
Apply, save, and restart Wireshark. Load the mac-names.pcap file. Now the
resolved OUIs will be shown.

6. Click View > Name Resolution, uncheck Enable for MAC Layer. Click Reload.
The resolved OUIs will still be shown; the display will not revert to the
numeric MAC address display.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.