Wireshark-bugs: [Wireshark-bugs] [Bug 12412] Network-Layer Name Resolution first attempts undocu
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 09 May 2016 17:14:26 +0000

Comment # 10 on bug 12412 from 
(In reply to Pascal Quantin from comment #8)
> Do you have an IPv6 DNS configured, and if yes what is its address? 
> As explained in https://bugzilla.redhat.com/show_bug.cgi?id=1121720 some
> buggy software seem to interpret an IPv6 address as IPv4 so maybe this is
> what is happening here also?


Yep, that's the problem.

The IPv4 address seen 32.1.4.112 matches the beginning of the first DNS
resolver listed by ipconfig /all, which starts with 2001:0470: (Hurricane
Electric).


procexp64 against Wireshark points to

C:\Windows\system32\DNSAPI.dll

which has the attributes

CompanyName: Microsoft Corporation
FileDescription: DNS Client API DLL
FileVersion: 6.0.6002.18416 (vistasp2_gdr.110302-0237)
InternalName: dnsapi
LegalCopyright: (c) Microsoft Corporation. All rights reserved.
OriginalFilename: dnsapi
ProductName: Microsoft (r) Windows (r) Operating System
ProductVersion: 6.0.6002.18416


or perhaps this is the culprit

C:\Program Files\Bonjour\mdnsNSP.dll

CompanyName: Apple Inc.
FileDescription: Bonjour Namespace Provider
FileVersion: 3,0,0,10
InternalName: mdnsNSP.dll
LegalCopyright: Copyright (C) 2003-2011 Apple Inc.
OriginalFilename: mdnsNSP.dll
ProductName: Bonjour
ProductVersion: 3,0,0,10


I'm rather at a loss to understand how the latter gets loaded by Wireshark.

You are receiving this mail because:
  • You are watching all bug changes.