These are our Wireshark Profiles in ZIP format. Import these to your Wireshark installation. Wireshark Profiles are critically important because they allow users to preserve, reuse, and rapidly switch between purpose-built analysis environments without reconfiguring the tool each time. For anyone doing repeatable packet analysis—especially across different protocols, customers, or troubleshooting scenarios—profiles transform Wireshark from a generic packet viewer into a disciplined analytical instrument.
Post Views: 17,401 Updated 07/23/26 from feedback! Thanks to your comments! Enjoy! Every application turn starts with DNS! This is a great profile for DNS learning, troubleshooting, and analysis. The updated Wireshark DNS Analysis Profile takes DNS troubleshooting to the next level by giving analysts immediate visibility into both traditional and modern encrypted DNS traffic. […]
A DNS Profile for Wireshark Read More »
Post Views: 3,451 This is our OpenFlow profile used for SDN controller to switch communications, among other SDN functions. Enjoy!
An OpenFlow protocol Profile Read More »
Post Views: 5,214 This is our TLS profile that helps isolate TLS information and HTTPS sessions and quickly filter those sessions.
TLS Focus Profile (updated for Wireshark 3.4.0 and onward) Read More »
Post Views: 17,547 This is our HTTPS and TLS combined profile that helps isolate TLS information and HTTPS sessions and quickly filter those sessions. You can read more about how to use this profile here.
HTTPS/TLS Profile (updated for Wireshark 3.4.0 and onward) Read More »
Post Views: 3,717 With the new Wireshark 2.4 release you will see TRANSUM is an included plugin. So we decided to update and share our TRANSUM profile! Enjoy. You can read more information here.
TRANSUM Default Profile – perfect for the new Wireshark 2.4 and onwards Read More »
Post Views: 3,564 This is Jasper Bongertz’s default profile – find him on Twitter @PacketJay From Jasper: “There you go… this is my main profile, for working on screens with aminimum resolutions of 1980×1024.” Cheers,Jasper
Jaspers Default Profile Read More »
Post Views: 15,353 This profile is for VoIP analysis in Wireshark. You need a number of profiles to be successful with VoIP packet analysis. This profile focuses on QoS.
A VoIP QoS profile for analysis in Wireshark Read More »
Post Views: 16,273 This profile is for VoIP analysis in Wireshark. You need a number of profiles to be successful with VoIP packet analysis. This profile focuses on RTP.
A Real Time Protocol (RTP) profile for VoIP analysis in Wireshark Read More »
Post Views: 15,424 This profile is for VoIP analysis in Wireshark. You need a number of profiles to be successful with VoIP packet analysis. This profile focuses on RTCP.
A Real Time Control Protocol RTCP profile for VoIP analysis in Wireshark Read More »
Post Views: 16,337 This profile is for VoIP SIP protocol analysis in Wireshark. You need a number of profiles to be successful with complete VoIP packet analysis. Since SIP is the control plane of VoIP, this is a big one!! This profile focuses on SIP.
A Session Initialization Protocol (SIP) Profile for VoIP analysis in Wireshark Read More »
Post Views: 15,401 This profile is for VoIP analysis in Wireshark. You need a number of profiles to be successful with VoIP packet analysis. This profile focuses on SDP.
A Session Description Protocol (SDP) Profile for VoIP Analysis Read More »
Post Views: 4,741 Ah, our frienemy STP. It can be so nice and yet so troublesome. Here is a great Spanning Tree profile to help find BPDU’s and reveal their contents swiftly and easily.
A Spanning Tree Protocol (STP) Profile Read More »
Post Views: 15,493 In an IPv4 and Ethernet network, the protocol that makes the two layers work together is ARP. This awesome profile focuses on ARP analysis. ARP protocol analysis is important in troubleshooting because it directly exposes how IP addresses are being resolved to physical (MAC) addresses at Layer 2, which is a prerequisite
An ARP Protocol focus Profile for Wireshark Read More »
Post Views: 4,111 The Internet error reporting protocol is the Internet Control Message Protocol – ICMP. ICMP has changed over the years. This ICMP profile is one of those ‘check it off the list’ quick verifications you have to make to insure that issues being reported by the network are not the problem. With additional
An ICMPv4 for IPv4 Networks Profile Read More »
Post Views: 4,624 The Internet error reporting protocol is the Internet Control Message Protocol – ICMP. ICMP has changed over the years. This ICMP profile is specifically tuned for looking at Traceroute captures. With additional ICMP focused columns and better colors (no errors should be green): Further, with filters buttons for all the various ICMP
An ICMP for Traceroute Analysis in IPv4 Networks Profile Read More »
