For those of you who love Wireshark and are supporting BGP, we would like to offer a great default profile for basic BGP. Consider for a moment what would be important in your network administration in basic BGP:
- Being able to filter BGP packets quickly, as well as finding potentially bogus BGP
- Colorizing BGP message types
- Being able to quickly see Autonomous System numbers, metrics, and AS Paths
All this would be a great starting point.
Profiles are one of the most important Wireshark capabilities. Setting up and using different profiles for different environments, protocols, and tasks is a crucial skill that we teach in our Wireshark courses. Let’s say you went to the Wireshark site and tried to find some! Suprisingly, here is what you would get:
Whaaaaat?????
No worries. We have an answer below:
Let’s look at what you get with this default basic BGP profile.
Capture Filters
Here are the capture filters in this profile:
Display Filters
Here are the display filters in this profile:
Colorization:
Here are the color rules we added:
Columns
Here are the columns set up we like:
Again, all of this is a great starting point. What do you think we are missing? What would you add?
To download this ZIP file click here. Make sure you unzip it into your personal folders, profiles subdirectory:
We hope this helps you with BGP and Wireshark!
Got a better one? Or have a profile you would like to send to us? Send it to andyw@cellstream.com – thanks in advance – we share profiles here.
Another way to find profiles, click on “Profile” in the tag cloud.
I hope you find this article and its content helpful.
If you would like to help support the continued development of independent networking, broadband, Wi-Fi, VoIP, and packet analysis content, please consider joining our Patreon community where you will gain access to exclusive technical resources, downloadable labs and PCAPs, bonus course content, troubleshooting guides, and additional member-only material. Comments and technical discussion are always welcomed at our Patreon community or on our Discord server. You can also support our work by simply buying us a coffee — every contribution helps us continue creating practical, real-world network science education for professionals and enthusiasts alike.