Default profile

The preferences that constitute your default profile consist of a series of files, as do all profiles. You can reset your default profile to the default values by deleting these files.

In the Windows version of Wireshark, go to Help > About and click on the Folders tab. Double-click the link labeled "Personal Configuration." This will take you to the folder that contains the various preference files. Make a backup of this folder before you delete anything, but almost all of the files in this folder can be safely deleted. If there is a profiles folder, don't delete it. The profiles folder contains your other profiles.

These are some of the more common files that can be safely deleted:

• colorfilters - contains the coloring rules for your default profile
• dfilters - contains saved display filters for your default profile
• cfilters - contains saved capture filters for your default profile
• recent - contains some preference settings for your default profile, mostly related to how things are displayed
• preferences - contains most other preference settings for your default profile

There can be other files, depending on how much you've changed Wireshark's settings.

The following files apply to all profiles. You can safely delete them if you don't have any other profiles.

• preferences_common
• geoip_db_paths

If you do have other profiles, you may want to keep these files, but even if you do delete them, the important files for your other profiles are saved in the individual profile directories under the profiles folder.