On Mon, 3 Mar 2003 10:50:58 -0500
> okay I am learning the path but am stumped at a point ...
> Network is 3 XP machines, 1 win ME, a win 2000, and a linux router on a
> cable modem.
> I run "tcpdump -aqi eth 1 not arp" on the router but wish my internal IP's
> from the windoze boxes to come up as names i.e. "Games" "email" etc. is
> their a place I can go for a manual, or a page of code, on getting IP
> address to resolve to names in TCPDUMP for the internal network display with
> out fudging the windows DNS lookup work. (I use 22.214.171.124 for DNS on
> the windows boxes now.)
Well, i am no guru or monk - more of a lowely apprentice, but...
If it is only few machines with static ip`s, you could hardwire names into /etc/hosts on your linux box.
That is the simplest solution. Make it look something like:
And make sure your /etc/nsswitch.conf has a similar line:
hosts: files dns
The NETBIOS names Windows uses internally and DNS names are not the same.
I doubt tcpdump can resolve NETBIOS names.
Harder solution would be to install you own "fake_root" DNS server - but there is probably no need for it.