First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

what is difference between .local and .domain_name packets

Hi all,

in my packet capture for my organization (let's name my organization as 'xyz'), I saw two different types of name resolution details for the same device. for example, if the device name is A001, I saw packets for A001.local and A001.xyz.com. I wonder how it can be possible. It would be a great help if anyone could help me understand why there are two different resolutions for the same ethernet address (.local and .domain_name).

Note: The device is in the domain xyz.com. So A001.xyz.com seems fine for me. But A001.local is a bit confusing. Thanks in advance

badhusha's avatar
1
badhusha
asked 2023-10-30 11:05:02 +0000, updated 2023-10-30 11:07:14 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Don't normally link to Wikipedia but there doesn't seem to be one definitive document: .local

Chuckc's avatar Chuckc (2023-10-30 15:49:20 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

Not a wireshark question.

But it depends on the DNS client. If they seek a host and have no knowledge of a domain they may seek for host.local besides host. But if the domain is known then they will add the domain in the query.

So investigate the clients.

hugo.vanderkooij's avatar
76
hugo.vanderkooij
answered 2023-10-30 12:24:48 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer