|
Check out these great references as well: |
| Our custom profiles repository for Wireshark |
| Our Udemy course on Wireshark |
| Our Udemy course on Wireless Packet capture |
When using Wireshark, on some computers, the number of interfaces present due to things like virtualization and other configurations can be overwhelming. Some times, like when we are using Wireless interfaces, we want to only show the Wireless interfaces. Other times, we just want to simplify our lives.
Wireshark allows us to manage what interfaces are displayed by Profile. So if I am using a Wireless profile, maybe I only want to show the wireless interfaces.
OK – I am in my default profile – and here is my interface list from the Wireshark home screen:
On this system, let’s say I only ever capture on the Ethernet interface ond the Wi-Fi interface.
There is a simple change to Wireshark that you can make in order to simplify this list, and it is totally reversable. Think of it as hiding some of the interfaces. There are actually two ways to accomplish this.
Option 1
Click on the “All interfaces shown” button on the right of the home screen. You can select Physical vs. Virtual and unclick what you do not wish to appear. I did this and deselected the Virtual interfaces on my machine:
You can see Wireshark has changed this to tell me that interfaces are hidden. Nice. OK – not bad, but for me, it is not specific enough.
Option 2
Select Capture> Options, or simply hit CTRL-K from the main Wireshark screen. You will get this pop-up:
Now select the Manage Interfaces button, and you get this pop up:
Now from here you can do many things like make comments on the interfaces and such.
But for our purposes, what I am going to do is deselect the interfaces that I do not want to show up, leaving just the two interfaces I always use to capture selected:
Click on OK.
Back on the Manage Interfaces dialogue, I see just the two interfaces:
And back on the Wireshark home screen, I just see the two interfaces:
Perfect!
Remember – this is all reversable, and it is saved in your current Profile. And that is really handy – meaning that some profiles can show some interfaces, while others show other interfaces.
Very cool.
Remember to keep different profiles for different tasks!! We have some great profiles available for download. Simply click here to easily find them.