Skip to main content

1.2 Customizing Profiles

This profile is going to be the default that is used, however, keep in mind, this will be dictated by your environment and the type of hunt you are doing. You can tweak them all to your liking, however, this will server as a baseline.

This is really more of a personal preference thing, but you can customize this profile and add / remove to your liking.

Step 1. Go to Edit -> Preferences -> Layout or Ctrl+Shift+P (Linux).

Wireshark-Preferences.png

Wireshark-Preferences-Layout.png

This will set up your profile to where there is the main pane on top is the packet list, the bottom left are the details of the packet, and the bottom right would be the pack bytes (It shows you the hex and ASCII values)