Post Views: 27 Most network engineers and technicians are quickly discovering that with “everything over IP” we are required to understand exactly what this means. For a lot of the standard, traditional data communications between clients and servers this means transport over TCP. Furthermore, it requires the ability to troubleshoot TCP. To troubleshoot TCP you
A new TCP Troubleshooting Profile Read More »
Post Views: 33 The CellStream Wireshark VXLAN Profile is designed to make VXLAN troubleshooting faster and easier by organizing the packet list around the fields that matter most in overlay networking. Instead of digging through nested headers, the profile helps expose the relationship between the underlay network, VXLAN tunnel, VNI, and encapsulated traffic so you
VXLAN Profile for Wireshark Read More »
Post Views: 144 The Cisco Discovery Protocol (CDP) Wireshark Profile is designed to make CDP traffic faster and easier to analyze. Rather than manually building filters and columns each time you open a capture, this profile provides a ready-to-use workspace focused on Cisco device discovery, neighbor identification, interface information, platform details, software versions, device capabilities,
Cisco Discovery Protocol (CDP) Profile Read More »
Post Views: 135 This is our Better Default Profile enhanced for initial examination of the TCP 3-Way Handshake. Enjoy!
TCP 3-Way Handshake Examination Profile Read More »
Post Views: 196 This is our OSPF Profile for Wireshark. If you work with OSPF and you do packet capture for troubleshooting, you need this profile. See OSPF Clearly This OSPF Wireshark Profile transforms a busy packet capture into a focused routing-analysis workspace. With purpose-built filters, columns, and views for Hello packets, neighbor formation, DR/BDR
OSPF Profile for Wireshark Read More »
Post Views: 304 This file contains the following synthetic Wireshark capture files: The lab procedure is in this post: https://www.cellstream.com/2026/04/23/net-neutrality-at-the-packet-level/
Net Neutrality Synthetic Lab Exercise Read More »
Post Views: 378 As discussed in my Net Neutrality post, I have created a Net Neutrality profile that helps with some display filter buttons and modification of columns. This is just a tool, and I strongly urge you to read and do the lab as described in the article.
Net Neutrality Wireshark Profile Read More »
Post Views: 558 LLDP (Link Layer Discovery Protocol) is a vendor-neutral Layer 2 protocol defined by the IEEE 802.1AB that allows network devices to advertise identity and capabilities to directly connected neighbors on the same Ethernet segment. Think of LLDP as a “hello, here’s who I am and what I can do” broadcast at Layer
A L2 LLDP Profile for Wireshark Read More »
Post Views: 525 CAN bus (Controller Area Network) is a robust, multi-master, message-based serial communication protocol used primarily in vehicles and industrial systems to allow Electronic Control Units (ECUs) to communicate over a shared two-wire differential bus without a central host. It was developed by Robert Bosch GmbH in the 1980s for automotive applications and
A CANBUS profile for Wireshark Read More »
Post Views: 5,790 Special thanks to Peter Gaudiomonte for sharing this profile to the repository. What is JA4+? JA4+ is an extension of the JA4 (Just Another 4-tuple) family of fingerprinting techniques. It’s used for network traffic fingerprinting—especially in encrypted traffic analysis—and can be useful for threat detection, TLS/QUIC fingerprinting, and application identification, even when
A JA4+ Profile for Wireshark Read More »
Post Views: 12,910 Now that we have the IETF QUIC and HTTP3 released and in play in the network, if you want to see this protocol, use this profile. Read more at my article here. This profile will help you work with IETF QUIC that has not been decrypted so you cannot see the HTTP3
IETF QUIC Protocol Profile – no decryption Read More »
Post Views: 1,638 This is a new version of our HTTP Profile for Wireshark. Wireshark defaults to this header reassembly process being ON. I have added a different version of this profile with this setting turned off – FYI. Header reassembly in HTTP troubleshooting can be confusing due to a combination of protocol layering, packet
A HTTP Profile with HDR Reassembly ON for Wireshark Read More »
Post Views: 1,975 This is a new version of our HTTP Profile for Wireshark. Wireshark defaults to a header reassembly process. I have added this version of the profile with this header reassembly setting turned off. Everything else is the same between the two profiles. Header reassembly in HTTP troubleshooting can be confusing due to
HTTP profile with Header Reassembly turned off for Wireshark Read More »
Post Views: 94,860 For those of you who love Wireshark and are supporting IPv6, we would like to offer an alternative to our default profile for IPv6. This one I call my IPv6 Super Profile. I created this based on modifying the Default IPv6 profile for a client that they called “super”. Think of it
IPv6 Super Profile (for Wireshark 3.4.0 and onwards) Read More »
Post Views: 6,377 Here is a UDP specific profile for Wireshark. Don’t be one of the people who overlook UDP in their troubleshooting! So many critical events in network operations actually use UDP! Especially today, with the rapid emergence of QUIC essentially replacing TCP. Enjoy. Many people overlook the UDP (User Datagram Protocol) in troubleshooting
