CloudShark Support

CloudShark DNS Resolution

Resolving DNS Names

DNS resolution with CloudShark may be turned on using decode options. Names can be resolved either locally or using DNS on the operating system. The name resolution behavior can be controlled using the nameres preferences.

Resolving Names Locally

Local hostname entries may be placed in the /home/cloudshark/.wireshark/hosts file. This file is used automatically when name resolution is enabled. Network level resolution can be enabled by adding the line nameres.network_name: TRUE to the decode options.

The format of the /home/cloudshark/.wireshark/hosts file is identical to /etc/hosts file. Another option is to symlink /home/cloudshark/.wireshark/hosts to /etc/hosts.

Resolving Names Externally

External name resolution will be enabled automatically when network name resolution is turned on. To disable external name resolution add the line nameres.use_external_name_resolver: FALSE to the decode options.

CloudShark can also use the systems own /etc/hosts file. To enable this add the line nameres.hosts_file_handling: TRUE to the decode options.

Enabling external DNS may effect performance while IP addresses are resolved to DNS names before displaying a capture. See the Wireshark documentation for more information on external DNS resolution.

About CloudShark

CloudShark is made by QA Cafe, a technology company based in Portsmouth, NH. Our passion for packet captures has grown out of our other product CDRouter.

Get in touch via our Contact us page or by following us on your favorite service: