On Fri, Mar 28, 2008 at 11:06:25AM -0000, Keith French wrote:

> In recent versions of Wireshark this behaviour seems to have changed, 
> in that it tries to resolve the source port of the SYN as well. The 
> name it resolves it to (on my PC anyway) is often misleading:-
> 
> qsnet-trans > http [SYN]

This is because we now ship Wireshark with a full services file (port to 
name mapping) from the IANA.  Windows has one built-in, but it is much 
shorter than the one we now use.

> Is there a way to do this?

Not unless you want to turn off port name lookups hroughout Wireshark, 
which can be done in the Name Resolution preferences (transport name 
resolution).


Steve
_______________________________________________
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

Reply via email to