These are our Wireshark Profiles in ZIP format. Import these to your Wireshark installation.
Ah, our frienemy STP. Â It can be so nice and yet so troublesome. Here is a great Spanning Tree profile to help find BPDU’s and reveal their contents swiftly and easily.
A Spanning Tree Protocol (STP) Profile Read More »
In an IPv4 and Ethernet network, the protocol that makes the two layers work together is ARP. Â This awesome profile focuses on ARP analysis.
An ARP Protocol focus Profile for Wireshark Read More »
The Internet error reporting protocol is the Internet Control Message Protocol – ICMP. ICMP has changed over the years. This ICMP profile is one of those ‘check it off the list’ quick verifications you have to make to insure that issues being reported by the network are not the problem. With additional ICMP focused columns
An ICMPv4 for IPv4 Networks Profile Read More »
The Internet error reporting protocol is the Internet Control Message Protocol – ICMP. ICMP has changed over the years. This ICMP profile is specifically tuned for looking at Traceroute captures. With additional ICMP focused columns and better colors (no errors should be green): Further, with filters buttons for all the various ICMP error messages, information,
An ICMP for Traceroute Analysis in IPv4 Networks Profile Read More »
IPv4 has essential information in the header that this profile focuses on such as the Quality of Service marking of the packet and other vital information. You can read more about this profile here.
A Wireshark Profile for IPv4 focus (Wireshark 3.4.0 and onwards) Read More »
If you are working in VLAN’s, having a profile that displays the VLAN ID and any QoS marking in the VLAN tag is essential. This profile adds those columns to Wireshark plus more.
An Ethernet VLAN Profile – focus on 802.1q Read More »
Checksum Offloading can be an annoyance. Luckily Wireshark allows you to turn this off at IP, TCP and even UDP. Navigating to these settings can be cumbersome, so why not have a profile that has the checksum validation process turned off? Exactly what this profile is about.
A Profile that simply turns off IP and TCP Checksum Validation Read More »
For those of you who love Wireshark and are supporting WLAN Wi-Fi Wireless networks, we would like to offer a great default profile for WLAN/Wi-Fi. Consider the areas you would want to start with: Special Colorization based on various packet types Display Filters to quickly find all kinds of Wi-Fi packets Capture Filters to aide
WLAN Wi-Fi Troubleshooting Profile Read More »
If you deal with enormous capture files, speeding your work process up is crucial. I explain this in the following video: This is a minimized dissector profile that will reduce Wireshark crashes, speed your carving/parsing jobs, and generally speed up Wireshark activities such as Statistics. What did we do? Â We simply went to Analyze> Enabled
A Minimal Dissector Profile for Wireshark Read More »
Most Wireshark users agree that the default profile is simply not good enough. The default should be a profile that you can start troubleshooting from. It should be a place where you can check off some important basics as you begin your evidence gathering. My “better default” profile is just that. With important initial investigation
A Better Default Profile (for Wireshark ver 3.4.0 and later) Read More »
If you support MPLS operations in your network, then you need to have an MPLS profile. In this case, we have an LDP profile for you to use. This is great for fundamental MPLS operations involving LDP. As with any Profile for Wireshark, to add this profile, within Wireshark, click on Help> About Wireshark> then
Basic MPLS LDP Profile for Wireshark Read More »
For those of you who love Wireshark and are supporting BGP, we would like to offer a great default profile for basic BGP. Â Consider for a moment what would be important in your network administration in basic BGP: Being able to filter BGP packets quickly, as well as finding potentially bogus BGP Colorizing BGP message
Basic BGP Profile for Wireshark Read More »
For those of you who love Wireshark and are supporting IPv6, we would like to offer a great default profile for IPv6. Â Consider for a moment what would be important in your network administration in IPv6: Certainly anything having to do with ICMPv6 Being able to find packets with certain extension headers Being able to
IPv6 Router Advertisement (RA) Profile (for Wireshark 3.4.0 and onwards) Read More »
For those of you who love Wireshark and are supporting IPv6, we would like to offer a great default profile for IPv6. Â Consider for a moment what would be important in your network administration in IPv6: Certainly anything having to do with ICMPv6 Being able to find packets with certain extension headers Being able to
IPv6 Neighbor Solicitation (NS) Profile (for Wireshark 3.4.0 and onwards) Read More »
For those of you who love Wireshark and are supporting IPv6, we would like to offer a great default profile for IPv6. Â Consider for a moment what would be important in your network administration in IPv6: Certainly anything having to do with ICMPv6 Being able to find packets with certain extension headers Being able to
IPv6 Default Profile (for Wireshark 3.4.0 and onwards) Read More »
