Configuration

ADVANCED TOPICS
ANALYZE PCAP
OBTAIN PCAP
GET STARTED
Start Here

A config will always approach perfection
1 min |  Ross Jacobs |  July 7, 2019

Table of Contents

Quicklinks: Wireshark Config Profiles | Customization


Custom Configuration

Tshark, like Wireshark, uses a preferences file. A different preference file or keys can be specified with flags.

CommandDoes
tshark -C /path/to/configUses custom configuration file
tshark -o key:valueOverrides the specified preferences key

Add Tshark Alias

Aliases allow you to define default behavior or multiple sets of behavior.

Custom Config Alias

If you want to launch tshark with a custom configuration once in a blue moon, you could add an alias for it:

alias tshark-bluemoon='tshark -C BlueConfig -o BlueKey:BlueVal'

--color

To always enable color, add a line to your .profile or .bashrc:

echo "alias tshark='tshark --color'" >> ~/.profile

For more information, check out Tshark Colorized.