For those of you who love Wireshark and are supporting BGP, we would like to offer a great default profile for basic BGP. Consider for a moment what would be important in your network administration in basic BGP:
- Being able to filter BGP packets quickly, as well as finding potentially bogus BGP
- Colorizing BGP message types
- Being able to quickly see Autonomous System numbers, metrics, and AS Paths
All this would be a great starting point.
Profiles are one of the most important Wireshark capabilities. Setting up and using different profiles for different environments, protocols, and tasks is a crucial skill that we teach in our Wireshark courses. Let's say you went to the Wireshark site and tried to find some! Suprisingly, here is what you would get:
No worries. We have an answer below:
Let's look at what you get with this default basic BGP profile.
Here are the capture filters in this profile:
Here are the display filters in this profile:
Here are the color rules we added:
Here are the columns set up we like:
Again, all of this is a great starting point. What do you think we are missing? What would you add?
To download this ZIP file click here. Make sure you unzip it into your personal folders, profiles subdirectory:
We hope this helps you with BGP and Wireshark!
Another way to find profiles, click on "Profile" in the tag cloud.