THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.

Revision history  [back]

Sudden issue with name resoution using hosts file

I'm running 4.2.2 on macOS 13.5.1.

Normally, I keep a symoblic link named hosts in /Applications/Wireshark.app/Contents/Resources/share/wireshark/ that points to a curated hosts file of about 2,400 entries that I keep in a OneDrive folder. After each upgrade, I recreate the symbolic link to restore name resolution.

After the last two upgrades (they seem to happen in fairly quick succession) I'm unable to restore name resolution.

Additionally, I've tried the following:

  • Creating symoblic link to hosts file in /Users//.local/lib/wireshark/plugins/
  • Copying hosts file to /Applications/Wireshark.app/Contents/Resources/share/wireshark/
  • Copying hosts file to /Users//.local/lib/wireshark/plugins/
  • Adding a test entry to /etc/hosts

I'm restarting Wireshark after each of these scenarios opening a previous capture to check.

  • View | Name Resolution | Resolve Network Addresses is checked.
  • Preferences | Application | Name Resolution | Resove network (IP) addresses is the only checked box under Name Reolution.
  • No DNS Servers are configured in Preferences

Transport resolution works. Toggling Name Resolution under View or Preferences is ineffective.

Thanks.