The profile definitions is an extremely versatile feature, and I have begun creating a variety of them depending on what view of the collected data I am interested in. What I have been unable to do is to share a "crafted profile" with co-workers or my work station at home. Is there a method to replicate a profile definition from one host to others? asked 28 May '13, 11:02  EngAtWork |
3 Answers:
Go to Help>About wireshark >Folders>Personal configuration in Wireshark GUI. when you click personal configuration link it will open the location of your profiles.Under Profiles folder you can see all your crafted profiles just select and share profile of your interest with your co-workers by copying it from your source location to destination. answered 28 May '13, 11:07  krishnayeddula edited 28 May '13, 11:17 |
Sure, you can find the files that are part of a profile in the Wireshark configuration directory which is located in your user home directory path. For Windows Vista and up its at c:\users\USERNAME\AppData\Roaming\Wireshark, while for Linux its in the Wireshark subfolder of the normal user home directory. In there are some files depending on if you've already changed settings (if they're default you'll not see a file until you change a setting) for capture filteres, preferences, displayfilters, colorfilters etc. These are the default settings. Each additional profile there is a subdirectory, again with a set of files that make up the profile. Just copy the files to the according directory on the target machine and you've migrated the settings. answered 28 May '13, 11:07  Jasper ♦♦ |
I have my profiles directory linked to Dropbox, that way I have all my profiles available on all three laptops. You could make a shared folder on Dropbox to even share the profiles with other users. answered 29 May '13, 09:31  SYN-bit ♦♦ I tried that, too, but went back to local profiles because the preferences file would be problematic in regard to the capture interfaces mentioned in there IIRC. On Windows all interfaces have different GUIDs for the NICs so Wireshark gets confused to see a preference mentioning NICs that aren't found in the system. (29 May '13, 10:31) Jasper ♦♦ |
Thank you - I admit I'd tried to tweak the display order of columns by editing (despite the warnings against doing so), which invalidated the definition.
why edit the file? Use drag and drop on the colum headers to rearrange them, or by dragging rows up and down in the preferences setting ;-)