## Summary The ip cannot be translated from provided file while using the following thsark command: tshark -Nn -H hosts.txt -Y '!(dhcp) && !(icmpv6) && !(arp) && !(dns) && !(vrrp) && !(esp) && !(bfd) && !(tcp.analysis.retransmission) && !(tcp.analysis.out_of_order) && !(tcp.analysis.duplicate_ack) && !(tcp.analysis.acks_frame) && !(tcp.connection.syn) && !(tcp.analysis.ack_lost_segment) && !(sip.Method=="OPTIONS") && !(sip.CSeq.method=="OPTIONS") && !(diameter.cmd.code==280) && !(arp.opcode==1) && !(arp.opcode==2) && !(sctp.chunk_type==4) && !(sctp.chunk_type==5) && !(sctp.chunk_type==1) && !(sctp.chunk_type==2)' -o "ulp.desegment_ulp_messages: TRUE" -o "ulp.tcp.port: 7275" -o "ulp.udp.port: 7275" -o "tcp.reassemble_out_of_order: TRUE" -o "tcp.analyze_sequence_numbers: TRUE" -o "tcp.calculate_timestamps: TRUE" -o "tcp.desegment_tcp_streams: TRUE" -o "tcp.dissect_experimental_options_with_magic: TRUE" -o "tcp.no_subdissector_on_error: TRUE" -o "tcp.reassemble_out_of_order: TRUE" -o "tcp.relative_sequence_numbers: TRUE" -o "tcp.summary_in_tree: TRUE" -o "tcp.track_bytes_in_flight: TRUE" -T fields -e frame.number -e _ws.col.protocol -e _ws.col.def_src -e _ws.col.def_dst -E aggregator="$" -E separator=/t -E header=y -E quote=d -r mypcap.pcap I'm expecting to have the name associated to the ip on the file. The file is a simple text file in the format: ip hostname The version is 4.3.3 Thanks