Thank you for the input. I think the "hosts" is what I am trying to do. Aliases is when a name is given to a particular device to make it easier for humans to read. For example, instead of listing a packet using its IP address, we replace the IP address with a human readable name i.e. "backbone_router". This makes it much easier to scan the packet window and to know which device created a particular packet.
We reveiwed the documentation regarding hosts. (now that we know what it is called, thank you again) When I attempted to use the hosts definition in Wireshark, I defined a plain text file named "hosts" and placed it in c:\users\colfaxnet\appdata\roaming\wireshark. (yes, I'm using Vista) The path is the one listed in "help, about Wireshark, Folders, Personal configuration". The entries in the "hosts" file are in the following form: xxx.xxx.xxx.xxx backbone_router xxx.xxx.xxx.xxx backbone_router (we have two different subnets on the same router) We only have two entries to start. We tried reloading the open capture file using "view, reload" and we also closed and reloaded Wireshark and then re-opened the capture file. Each time the packets containing the IP address are still listed as the IP address and not as "backbone_router". Is this because the capture file was created without the hosts file? It appears that the hosts file should be re-read when Wireshark is loaded or "reload" is selected from the view menu. Again, thank you for your input. Corey
_______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
