Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 88%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBG%3C/text%3E%3C/svg%3E)
Come on! It's been over a year and this is still not fixed!
Bug Report: tcpview bad IPv6 name resolution
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 52%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJG%3C/text%3E%3C/svg%3E)
James Garrison
261
Reputation points
TCPView v4.19 on Windows 11
With "Resolve names" OFF, tcpview displays the local and remote IPv6 addresses.
With "Resolve names" ON, it produces spurious "names" that look like IPv4 addresses, and then attempts to resolve those where possible.
Sysinternals
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 60%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Jason McCord 5 Reputation points2024-10-08T17:16:14.0166667+00:00 The "Resolved Address" appears to be the first parts of the IPv6 address converted to decimal and formatted as an IPv4 address.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 12%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMS%3C/text%3E%3C/svg%3E)
Matthew Steeples 111 Reputation points2024-10-14T13:53:39.7866667+00:00 I'm seeing this with Resolve Names on too. It's gone one step further and taken the first part of the IPv6 address converted to decimal and formatted as an IPv4 address and then done a DNS lookup on that. Those "fibrefirst" records are actually 2603:1020:5:4::f (somewhere in Azure)
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 15%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E0%3C/text%3E%3C/svg%3E)
03027367 1 Reputation point2026-06-28T12:32:41.9566667+00:00 still on win 10 32bit here, same problem, id like to see this fixed too, i do like these sysinternals tools 4 sure! also, whois from within tcpview doesn't work anymore?
Sign in to comment