First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Why is the source address column not showing the resolved name?

  • retag add tags

Hello again,

I have IP name resolution enabled. And the source column shows up the IP-Addres instead of the name. Is there a reason to do so?

Updated Image

Thx, Christian

3.2.7 (v3.2.7-0-gfb6522d84a3a)

Compiled (64-bit) with Qt 5.12.9, with WinPcap SDK (WpdPack) 4.1.2, with GLib
2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4,
with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos,
with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with
Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic
updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled
resampler), with SBC, with SpanDSP, with bcg729.

Running on 64-bit Windows 10 (1809), build 17763, with Intel(R) Core(TM)
i7-4710MQ CPU @ 2.50GHz (with SSE4.2), with 16261 MB of physical memory, with
locale German_Germany.1252, with light display mode, without HiDPI, with Npcap
version 0.9983, based on libpcap version 1.9.1-PRE-GIT, with GnuTLS 3.6.3, with
Gcrypt 1.8.3, with brotli 1.0.2, without AirPcap, binary plugins supported (19
loaded).

Built using Microsoft Visual Studio 2019 (VC++ 14.27, build 29111).
Christian_R's avatar
2.1k
Christian_R
asked 2020-10-17 10:22:19 +0000, updated 2020-10-17 18:08:47 +0000
edit flag offensive 0 remove flag close merge delete

Comments

I would assume that the IP doesn't resolve. Can you resolve the IP by other methods, e.g. dig?

grahamb's avatar grahamb (2020-10-17 13:56:18 +0000) edit

You are right, I will update the screenshot!

Christian_R's avatar Christian_R (2020-10-17 16:32:46 +0000) edit

Screenshot has been updated.... And makes more sense now...

Christian_R's avatar Christian_R (2020-10-17 18:11:33 +0000) edit

FWIW you're running with an old version of npcap:

with Npcap version 0.9983

1.00 is available from their site, it is 15 builds and 14 months newer. Lots have things have been fixed.

grahamb's avatar grahamb (2020-10-19 12:24:15 +0000) edit
add a comment see more comments

1 Answer

1

I suspect you have the "Src addr (unresolved)" in your column definition instead of "Source Address"?

SYN-bit's avatar
18.5k
SYN-bit
answered 2020-10-17 16:07:46 +0000
edit flag offensive 0 remove flag delete link

Comments

The packet details doesn't show a resolved name though, hence my comment.

grahamb's avatar grahamb (2020-10-17 16:22:28 +0000) edit

Let me check this....

Christian_R's avatar Christian_R (2020-10-17 16:33:26 +0000) edit

@grahamb In the packet details, the src is a RFC1918 address and is also not resolved in the dst column. It would indeed be interesting if the packet details don't show a resolved src of 94.142.246.86

SYN-bit's avatar SYN-bit (2020-10-17 17:56:59 +0000) edit

@SYN-bit You were absolutely right as we can see in the updated screenshot. I must have manipulated this in the Profile from I have copied it.

Thx

I used it once analyse the different IPs of a GRE Trace.

Christian_R's avatar Christian_R (2020-10-17 18:10:31 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer