DNS resolution with CloudShark may be turned on
using decode options. Names
can be resolved either locally or using DNS on the operating system. The name resolution
behavior can be controlled using the
Local hostname entries may be placed in the
file. This file is used automatically when name resolution is enabled. Network
level resolution can be enabled by adding the line
to the decode options.
The format of the
/home/cloudshark/.wireshark/hosts file is identical to
/etc/hosts file. Another option is to symlink
External name resolution will be enabled automatically when network name
resolution is turned on. To disable external name resolution add the
nameres.use_external_name_resolver: FALSE to the decode options.
CloudShark can also use the systems own
/etc/hosts file. To enable this add
nameres.hosts_file_handling: TRUE to the decode options.
Enabling external DNS may effect performance while IP addresses are resolved to DNS names before displaying a capture. See the Wireshark documentation for more information on external DNS resolution.