For those of you who love Wireshark and are supporting BGP, we would like to offer a great default profile for basic BGP. Consider for a moment what would be important in your network administration in basic BGP:
- Being able to filter BGP packets quickly, as well as finding potentially bogus BGP
- Colorizing BGP message types
- Being able to quickly see Autonomous System numbers, metrics, and AS Paths
All this would be a great starting point.
Profiles are one of the most important Wireshark capabilities. Setting up and using different profiles for different environments, protocols, and tasks is a crucial skill that we teach in our Wireshark courses. Let’s say you went to the Wireshark site and tried to find some! Suprisingly, here is what you would get:
Whaaaaat?????
No worries. We have an answer below:
Let’s look at what you get with this default basic BGP profile.
Capture Filters
Here are the capture filters in this profile:
Display Filters
Here are the display filters in this profile:
Colorization:
Here are the color rules we added:
Columns
Here are the columns set up we like:
Again, all of this is a great starting point. What do you think we are missing? What would you add?
To download this ZIP file click here. Make sure you unzip it into your personal folders, profiles subdirectory:
We hope this helps you with BGP and Wireshark!
Got a better one? Or have a profile you would like to send to us? Send it to andyw@cellstream.com – thanks in advance – we share profiles here.
Another way to find profiles, click on “Profile” in the tag cloud.
I hope you find this article and its content helpful. Comments are welcomed below. If you would like to see more articles like this, please support us by clicking the patron link where you will receive free bonus access to courses and more, or simply buying us a cup of coffee!, and all comments are welcome!