On Fri, Mar 28, 2008 at 11:06:25AM -0000, Keith French wrote: > In recent versions of Wireshark this behaviour seems to have changed, > in that it tries to resolve the source port of the SYN as well. The > name it resolves it to (on my PC anyway) is often misleading:- > > qsnet-trans > http [SYN]
This is because we now ship Wireshark with a full services file (port to name mapping) from the IANA. Windows has one built-in, but it is much shorter than the one we now use. > Is there a way to do this? Not unless you want to turn off port name lookups hroughout Wireshark, which can be done in the Name Resolution preferences (transport name resolution). Steve _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users