-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathpreferences
5702 lines (4342 loc) · 218 KB
/
preferences
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# Configuration file for Wireshark 3.6.2.
#
# This file is regenerated each time preferences are saved within
# Wireshark. Making manual changes should be safe, however.
# Preferences that have been commented out have not been
# changed from their default value.
####### User Interface ########
# Open a console window (Windows only)
# One of: NEVER, AUTOMATIC, ALWAYS
# (case-insensitive).
#gui.console_open: NEVER
# Restore current display filter after following a stream?
# TRUE or FALSE (case-insensitive)
#gui.restore_filter_after_following_stream: FALSE
# Where to start the File Open dialog box
# One of: LAST_OPENED, SPECIFIED
# (case-insensitive).
#gui.fileopen.style: LAST_OPENED
# The max. number of items in the open recent files list
# A decimal number
#gui.recent_files_count.max: 10
# The max. number of entries in the display filter list
# A decimal number
#gui.recent_display_filter_entries.max: 10
# Directory to start in when opening File Open dialog.
# A path to a directory
#gui.fileopen.dir:
# The preview timeout in the File Open dialog
# A decimal number
#gui.fileopen.preview: 3
# Ask to save unsaved capture files?
# TRUE or FALSE (case-insensitive)
#gui.ask_unsaved: TRUE
# Display an autocomplete suggestion for display and capture filter controls
# TRUE or FALSE (case-insensitive)
#gui.autocomplete_filter: TRUE
# Wrap to beginning/end of file during search?
# TRUE or FALSE (case-insensitive)
#gui.find_wrap: TRUE
# Save window position at exit?
# TRUE or FALSE (case-insensitive)
#gui.geometry.save.position: TRUE
# Save window size at exit?
# TRUE or FALSE (case-insensitive)
#gui.geometry.save.size: TRUE
# Save window maximized state at exit?
# TRUE or FALSE (case-insensitive)
#gui.geometry.save.maximized: TRUE
# Main Toolbar style
# One of: ICONS, TEXT, BOTH
# (case-insensitive).
#gui.toolbar_main_style: ICONS
# Check for updates (Windows and macOS only)
# TRUE or FALSE (case-insensitive)
#gui.update.enabled: TRUE
# The type of update to fetch. You should probably leave this set to STABLE.
# One of: DEVELOPMENT, STABLE
# (case-insensitive).
#gui.update.channel: STABLE
# How often to check for software updates in seconds
# A decimal number
#gui.update.interval: 86400
# Custom window title to be appended to the existing title
# %F = file path of the capture file
# %P = profile name
# %S = a conditional separator (" - ") that only shows when surrounded by variables with values or static text
# %V = version info
# A string
#gui.window_title:
# Custom window title to be prepended to the existing title
# %F = file path of the capture file
# %P = profile name
# %S = a conditional separator (" - ") that only shows when surrounded by variables with values or static text
# %V = version info
# A string
#gui.prepend_window_title:
# Custom start page title
# A string
#gui.start_title: The World's Most Popular Network Protocol Analyzer
# Show version in the start page and/or main screen's title bar
# One of: WELCOME, TITLE, BOTH, NEITHER
# (case-insensitive).
#gui.version_placement: BOTH
# The maximum number of objects that can be exported
# A decimal number
#gui.max_export_objects: 1000
# The maximum number of items that can be added to the dissection tree (Increase with caution)
# A decimal number
#gui.max_tree_items: 1000000
# The maximum depth of the dissection tree (Increase with caution)
# A decimal number
#gui.max_tree_depth: 500
# The position of "..." in packet list text.
# One of: LEFT, RIGHT, MIDDLE, NONE
# (case-insensitive).
#gui.packet_list_elide_mode: RIGHT
# Sets the count of decimal places for values of type 1.Type 1 values are defined by authors.Value can be in range 2 to 10.
# A decimal number
#gui.decimal_places1: 2
# Sets the count of decimal places for values of type 2.Type 2 values are defined by authors.Value can be in range 2 to 10.
# A decimal number
#gui.decimal_places2: 4
# Sets the count of decimal places for values of type 3.Type 3 values are defined by authors.Value can be in range 2 to 10.
# A decimal number
#gui.decimal_places3: 6
# If set to true, RTP Player saves temporary data to temp files on disk. If not set, it uses memory.Every stream uses one file therefore you might touch OS limit for count of opened files.When ui.rtp_player_use_disk2 is set to true too, it uses two files per RTP stream together.
# TRUE or FALSE (case-insensitive)
#gui.rtp_player_use_disk1: FALSE
# If set to true, RTP Player saves temporary dictionary to temp files on disk. If not set, it uses memory.Every stream uses one file therefore you might touch OS limit for count of opened files.When ui.rtp_player_use_disk1 is set to true too, it uses two files per RTP stream.
# TRUE or FALSE (case-insensitive)
#gui.rtp_player_use_disk2: FALSE
# Show all interfaces, including interfaces marked as hidden
# TRUE or FALSE (case-insensitive)
#gui.interfaces_show_hidden: FALSE
# Show remote interfaces in the interface selection
# TRUE or FALSE (case-insensitive)
#gui.interfaces_remote_display: TRUE
# Hide the given interface types in the startup list.
# A comma-separated string of interface type values (e.g. 5,9).
# 0 = Wired,
# 1 = AirPCAP,
# 2 = Pipe,
# 3 = STDIN,
# 4 = Bluetooth,
# 5 = Wireless,
# 6 = Dial-Up,
# 7 = USB,
# 8 = External Capture,
# 9 = Virtual
# A string
#gui.interfaces_hidden_types:
# Enables automatic updates for IO Graph
# TRUE or FALSE (case-insensitive)
#gui.io_graph_automatic_update: TRUE
####### User Interface: Colors ########
# Foreground color for an active selected item
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
#gui.active_frame.fg: 000000
# Background color for an active selected item
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
gui.active_frame.bg: 9b5b00
# Color style for an active selected item
# One of: DEFAULT, FLAT, GRADIENT
# (case-insensitive).
gui.active_frame.style: FLAT
# Foreground color for an inactive selected item
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
gui.inactive_frame.fg: ffffff
# Background color for an inactive selected item
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
gui.inactive_frame.bg: a06900
# Color style for an inactive selected item
# One of: DEFAULT, FLAT, GRADIENT
# (case-insensitive).
gui.inactive_frame.style: FLAT
# Color preferences for a marked frame
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
#gui.marked_frame.fg: ffffff
# Color preferences for a marked frame
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
#gui.marked_frame.bg: 00202a
# Color preferences for a ignored frame
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
#gui.ignored_frame.fg: 7f7f7f
# Color preferences for a ignored frame
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
#gui.ignored_frame.bg: ffffff
# TCP stream window color preference
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
#gui.stream.client.fg: 7f0000
# TCP stream window color preference
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
#gui.stream.client.bg: fbeded
# TCP stream window color preference
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
#gui.stream.server.fg: 00007f
# TCP stream window color preference
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
#gui.stream.server.bg: ededfb
# Valid color filter background
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
gui.color_filter_bg.valid: 0b1e25
# Invalid color filter background
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
gui.color_filter_bg.invalid: bd3612
# Deprecated color filter background
# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
gui.color_filter_bg.deprecated: a57704
####### User Interface: Columns ########
# Packet list hidden columns
# List all columns to hide in the packet list.
gui.column.hidden: %Gt,%L,%s,%d,%Cus:ngap.RAN_UE_NGAP_ID:0:R,%p,%Cus:ngap.AMF_UE_NGAP_ID:0:R
# Packet list column format
# Each pair of strings consists of a column title and its format
gui.column.format:
"No.", "%m",
"Time", "%t",
"delta", "%Gt",
"len", "%L",
"Source", "%s",
"Destination", "%d",
"RAN-UE", "%Cus:ngap.RAN_UE_NGAP_ID:0:R",
"Protocol", "%p",
"AMF-UE", "%Cus:ngap.AMF_UE_NGAP_ID:0:R",
"Info", "%i"
####### User Interface: Font ########
# Font name for packet list, protocol tree, and hex dump panes. (Qt)
# A string
gui.qt.font_name: Source Code Pro,12,-1,5,50,0,0,0,0,0,Regular
####### User Interface: Layout ########
# Layout type (1-6)
# A decimal number
gui.layout_type: 5
# Layout content of the pane 1
# One of: NONE, PLIST, PDETAILS, PBYTES, PDIAGRAM
# (case-insensitive).
#gui.layout_content_1: PLIST
# Layout content of the pane 2
# One of: NONE, PLIST, PDETAILS, PBYTES, PDIAGRAM
# (case-insensitive).
gui.layout_content_2: PBYTES
# Layout content of the pane 3
# One of: NONE, PLIST, PDETAILS, PBYTES, PDIAGRAM
# (case-insensitive).
gui.layout_content_3: PDETAILS
# Enable Packet List Separator
# TRUE or FALSE (case-insensitive)
#gui.packet_list_separator.enabled: FALSE
# Show column definition in packet list header
# TRUE or FALSE (case-insensitive)
#gui.packet_header_column_definition.enabled: TRUE
# Enable Packet List mouse-over colorization
# TRUE or FALSE (case-insensitive)
#gui.packet_list_hover_style.enabled: TRUE
# Show selected packet in the Status Bar
# TRUE or FALSE (case-insensitive)
#gui.show_selected_packet.enabled: FALSE
# Show file load time in the Status Bar
# TRUE or FALSE (case-insensitive)
#gui.show_file_load_time.enabled: FALSE
# Show related packet indicators in the first column
# TRUE or FALSE (case-insensitive)
#gui.packet_list_show_related: TRUE
# Show the intelligent scroll bar (a minimap of packet list colors in the scrollbar)
# TRUE or FALSE (case-insensitive)
#gui.packet_list_show_minimap: TRUE
####### Capture ########
# Default capture device
# A string
#capture.device:
# Interface link-layer header types (Ex: en0(1),en1(143),...)
# A string
capture.devices_linktypes: en0(1),p2p0(12),awdl0(1),llw0(1),utun0(0),utun1(0),utun2(0),utun3(0),utun4(0),lo0(0),bridge0(1),en1(1),en2(1),en3(1),en4(1),en5(1),gif0(0),stf0(0),ciscodump(147),randpkt(147),sshdump(147),udpdump(252)
# Interface descriptions (Ex: eth0(eth0 descr),eth1(eth1 descr),...)
# A string
#capture.devices_descr:
# Hide interface? (Ex: eth0,eth3,...)
# A string
#capture.devices_hide:
# By default, capture in monitor mode on interface? (Ex: eth0,eth3,...)
# A string
#capture.devices_monitor_mode:
# Interface buffer size (Ex: en0(1),en1(143),...)
# A string
capture.devices_buffersize: en0(2),p2p0(2),awdl0(2),llw0(2),utun0(2),utun1(2),utun2(2),utun3(2),utun4(2),lo0(2),bridge0(2),en1(2),en2(2),en3(2),en4(2),en5(2),gif0(2),stf0(2),ciscodump(2),randpkt(2),sshdump(2),udpdump(2),-(2)
# Interface snap length (Ex: en0(65535),en1(1430),...)
# A string
capture.devices_snaplen: en0:0(262144),p2p0:0(262144),awdl0:0(262144),llw0:0(262144),utun0:0(262144),utun1:0(262144),utun2:0(262144),utun3:0(262144),utun4:0(262144),lo0:0(262144),bridge0:0(262144),en1:0(262144),en2:0(262144),en3:0(262144),en4:0(262144),en5:0(262144),gif0:0(262144),stf0:0(262144),ciscodump:0(262144),randpkt:0(262144),sshdump:0(262144),udpdump:0(262144),-:0(262144)
# Interface promiscuous mode (Ex: en0(0),en1(1),...)
# A string
capture.devices_pmode: en0(1),p2p0(1),awdl0(1),llw0(1),utun0(1),utun1(1),utun2(1),utun3(1),utun4(1),lo0(1),bridge0(1),en1(1),en2(1),en3(1),en4(1),en5(1),gif0(1),stf0(1),ciscodump(1),randpkt(1),sshdump(1),udpdump(1),-(1)
# Capture in promiscuous mode?
# TRUE or FALSE (case-insensitive)
#capture.prom_mode: TRUE
# Interface capture filter (Ex: en0(tcp),en1(udp),...)
# A string
#capture.devices_filter:
# Capture in pcapng format?
# TRUE or FALSE (case-insensitive)
#capture.pcap_ng: TRUE
# Update packet list in real time during capture?
# TRUE or FALSE (case-insensitive)
#capture.real_time_update: TRUE
# Don't automatically load capture interfaces on startup
# TRUE or FALSE (case-insensitive)
#capture.no_interface_load: FALSE
# Disable external capture modules (extcap)
# TRUE or FALSE (case-insensitive)
#capture.no_extcap: FALSE
# Scroll packet list during capture?
# TRUE or FALSE (case-insensitive)
#capture.auto_scroll: TRUE
# Show capture information dialog while capturing?
# TRUE or FALSE (case-insensitive)
#capture.show_info: FALSE
# Column list
# List of columns to be displayed in the capture options dialog.
# Possible values: INTERFACE, LINK, PMODE, SNAPLEN, MONITOR, BUFFER, FILTER
#
#capture.columns:
# "INTERFACE", "LINK",
# "PMODE", "SNAPLEN",
# "MONITOR", "BUFFER",
# "FILTER"
####### Console ########
# Look for dissectors that left some bytes undecoded (debug)
# TRUE or FALSE (case-insensitive)
#console.incomplete_dissectors_check_debug: FALSE
####### Extcap Utilities ########
# Save arguments on start of capture
# TRUE or FALSE (case-insensitive)
#extcap.gui_save_on_start: TRUE
# Max bytes in a packet
# A string
#extcap.randpkt.maxbytes: 5000
# Number of packets
# A string
#extcap.randpkt.count: 1000
# Packet delay (ms)
# A string
#extcap.randpkt.delay: 0
# Random type
# A string
#extcap.randpkt.randomtype: false
# All random packets
# A string
#extcap.randpkt.allrandom: false
# Type of packet
# A string
#extcap.randpkt.type:
# Run in debug mode
# A string
#extcap.randpkt.debug: false
# Use a file for debug
# A string
#extcap.randpkt.debugfile:
# Remote SSH server address
# A string
#extcap.ciscodump.remotehost:
# Remote SSH server port
# A string
#extcap.ciscodump.remoteport: 22
# Remote SSH server username
# A string
#extcap.ciscodump.remoteusername: merlin
# Path to SSH private key
# A string
#extcap.ciscodump.sshkey:
# ProxyCommand
# A string
#extcap.ciscodump.proxycommand:
# Remote interface
# A string
#extcap.ciscodump.remoteinterface:
# Remote capture filter
# A string
#extcap.ciscodump.remotefilter: deny tcp host 2a05:3e00:9:110a::1003 any eq 0, deny tcp any eq 0 host 2a05:3e00:9:110a::1003, deny tcp host fe80::aede:48ff:fe00:1122 any eq 0, deny tcp any eq 0 host fe80::aede:48ff:fe00:1122, deny tcp host 100.113.10.5 any eq 0, deny tcp any eq 0 host 100.113.10.5, deny tcp host fe80::929:8cba:59d:be3c any eq 0, deny tcp any eq 0 host fe80::929:8cba:59d:be3c, deny tcp host fe80::a976:d231:85af:d24f any eq 0, deny tcp any eq 0 host fe80::a976:d231:85af:d24f, deny tcp host fe80::e1f8:3ac:189f:24b8 any eq 0, deny tcp any eq 0 host fe80::e1f8:3ac:189f:24b8, deny tcp host fe80::b011:7b11:47ff:67db any eq 0, deny tcp any eq 0 host fe80::b011:7b11:47ff:67db, deny tcp host fe80::ce81:b1c:bd2c:69e any eq 0, deny tcp any eq 0 host fe80::ce81:b1c:bd2c:69e, deny tcp host fe80::a425:ffbc:35f:abde any eq 0, deny tcp any eq 0 host fe80::a425:ffbc:35f:abde, deny tcp host fe80::ed54:fad7:329a:cd69 any eq 0, deny tcp any eq 0 host fe80::ed54:fad7:329a:cd69, deny tcp host fe80::f8cd:74ff:fe29:93d2 any eq 0, deny tcp any eq 0 host fe80::f8cd:74ff:fe29:93d2, deny tcp host fe80::f8cd:74ff:fe29:93d2 any eq 0, deny tcp any eq 0 host fe80::f8cd:74ff:fe29:93d2, deny tcp host 2a02:908:e843:160:fe59:9924:229:1f9b any eq 0, deny tcp any eq 0 host 2a02:908:e843:160:fe59:9924:229:1f9b, deny tcp host 2a02:908:e843:160:3988:f009:28f3:d97c any eq 0, deny tcp any eq 0 host 2a02:908:e843:160:3988:f009:28f3:d97c, deny tcp host 2a02:908:e843:160:8ae:2ee1:e713:a062 any eq 0, deny tcp any eq 0 host 2a02:908:e843:160:8ae:2ee1:e713:a062, deny tcp host 192.168.0.241 any eq 0, deny tcp any eq 0 host 192.168.0.241, deny tcp host fe80::4c9:2748:2671:2c99 any eq 0, deny tcp any eq 0 host fe80::4c9:2748:2671:2c99, deny tcp host fe80::aede:48ff:fe00:1122 any eq 0, deny tcp any eq 0 host fe80::aede:48ff:fe00:1122, deny tcp host fe80::1 any eq 0, deny tcp any eq 0 host fe80::1, permit ip any any
# Packets to capture
# A string
#extcap.ciscodump.remotecount:
# Run in debug mode
# A string
#extcap.ciscodump.debug: false
# Use a file for debug
# A string
#extcap.ciscodump.debugfile:
# Listen port
# A string
#extcap.udpdump.port: 5555
# Payload type
# A string
#extcap.udpdump.payload: data
# Run in debug mode
# A string
#extcap.udpdump.debug: false
# Use a file for debug
# A string
#extcap.udpdump.debugfile:
# Remote SSH server address
# A string
#extcap.sshdump.remotehost:
# Remote SSH server port
# A string
#extcap.sshdump.remoteport:
# Remote SSH server username
# A string
#extcap.sshdump.remoteusername:
# Path to SSH private key
# A string
#extcap.sshdump.sshkey:
# ProxyCommand
# A string
#extcap.sshdump.proxycommand:
# Remote interface
# A string
#extcap.sshdump.remoteinterface:
# Remote capture command
# A string
#extcap.sshdump.remotecapturecommand:
# Use sudo on the remote machine
# A string
#extcap.sshdump.remotesudo:
# No promiscuous mode
# A string
#extcap.sshdump.remotenoprom:
# Remote capture filter
# A string
#extcap.sshdump.remotefilter: not ((host 2a05:3e00:9:110a::1003 or host fe80::aede:48ff:fe00:1122 or host 100.113.10.5 or host fe80::929:8cba:59d:be3c or host fe80::a976:d231:85af:d24f or host fe80::e1f8:3ac:189f:24b8 or host fe80::b011:7b11:47ff:67db or host fe80::ce81:b1c:bd2c:69e or host fe80::a425:ffbc:35f:abde or host fe80::ed54:fad7:329a:cd69 or host fe80::f8cd:74ff:fe29:93d2 or host fe80::f8cd:74ff:fe29:93d2 or host 2a02:908:e843:160:fe59:9924:229:1f9b or host 2a02:908:e843:160:3988:f009:28f3:d97c or host 2a02:908:e843:160:8ae:2ee1:e713:a062 or host 192.168.0.241 or host fe80::4c9:2748:2671:2c99 or host fe80::aede:48ff:fe00:1122 or host fe80::1) and port 22)
# Packets to capture
# A string
#extcap.sshdump.remotecount: 0
# Run in debug mode
# A string
#extcap.sshdump.debug: false
# Use a file for debug
# A string
#extcap.sshdump.debugfile:
####### Name Resolution ########
# Resolve Ethernet MAC addresses to host names from the preferences or system's Ethers file, or to a manufacturer based name.
# TRUE or FALSE (case-insensitive)
#nameres.mac_name: TRUE
# Resolve TCP/UDP ports into service names
# TRUE or FALSE (case-insensitive)
#nameres.transport_name: FALSE
# Resolve IPv4, IPv6, and IPX addresses into host names. The next set of check boxes determines how name resolution should be performed. If no other options are checked name resolution is made from Wireshark's host file and capture file name resolution blocks.
# TRUE or FALSE (case-insensitive)
nameres.network_name: TRUE
# Whether address/name pairs found in captured DNS packets should be used by Wireshark for name resolution.
# TRUE or FALSE (case-insensitive)
#nameres.dns_pkt_addr_resolution: TRUE
# Use your system's configured name resolver (usually DNS) to resolve network names. Only applies when network name resolution is enabled.
# TRUE or FALSE (case-insensitive)
#nameres.use_external_name_resolver: TRUE
# Uses DNS Servers list to resolve network names if TRUE. If FALSE, default information is used
# TRUE or FALSE (case-insensitive)
#nameres.use_custom_dns_servers: FALSE
# The maximum number of DNS requests that may be active at any time. A large value (many thousands) might overload the network or make your DNS server behave badly.
# A decimal number
#nameres.name_resolve_concurrency: 500
# By default "hosts" files will be loaded from multiple sources. Checking this box only loads the "hosts" in the current profile.
# TRUE or FALSE (case-insensitive)
#nameres.hosts_file_handling: FALSE
# Resolve VLAN IDs to network names from the preferences "vlans" file. Format of the file is: "ID<Tab>Name". One line per VLAN, e.g.: 1 Management
# TRUE or FALSE (case-insensitive)
#nameres.vlan_name: FALSE
# Resolve SS7 Point Codes to node names from the profiles "ss7pcs" file. Format of the file is: "Network_Indicator<Dash>PC_Decimal<Tab>Name". One line per Point Code, e.g.: 2-1234 MyPointCode1
# TRUE or FALSE (case-insensitive)
#nameres.ss7_pc_name: FALSE
# Resolve Object IDs to object names from the MIB and PIB modules defined below. You must restart Wireshark for this change to take effect
# TRUE or FALSE (case-insensitive)
#nameres.load_smi_modules: FALSE
# While loading MIB or PIB modules errors may be detected, which are reported. Some errors can be ignored. If unsure, set to false.
# TRUE or FALSE (case-insensitive)
#nameres.suppress_smi_errors: FALSE
####### Protocols ########
# Display all hidden protocol items in the packet list.
# TRUE or FALSE (case-insensitive)
protocols.display_hidden_proto_items: TRUE
# Display all byte fields with a space character between each byte in the packet list.
# TRUE or FALSE (case-insensitive)
#protocols.display_byte_fields_with_spaces: FALSE
# Look for dissectors that left some bytes undecoded.
# TRUE or FALSE (case-insensitive)
protocols.enable_incomplete_dissectors_check: TRUE
# Protocols may use things like VLAN ID or interface ID to narrow the potential for duplicate conversations. Currently ICMP and ICMPv6 use this preference to add VLAN ID to conversation tracking, and IPv4 uses this preference to take VLAN ID into account during reassembly
# TRUE or FALSE (case-insensitive)
#protocols.strict_conversation_tracking_heuristics: FALSE
# Use a registered heuristic sub-dissector to decode the data payload
# TRUE or FALSE (case-insensitive)
#lbmc.use_heuristic_subdissectors: TRUE
# Reassemble data message fragments
# TRUE or FALSE (case-insensitive)
#lbmc.reassemble_fragments: FALSE
# Recognize and dissect payloads containing LBMPDM messages (requires reassembly to be enabled)
# TRUE or FALSE (case-insensitive)
#lbmc.dissect_lbmpdm: FALSE
# Set the low end of the TCP port range
# A decimal number
#lbmpdm_tcp.port_low: 14371
# Set the high end of the port range
# A decimal number
#lbmpdm_tcp.port_high: 14390
# Use table of LBMPDM-TCP tags to decode the packet instead of above values
# TRUE or FALSE (case-insensitive)
#lbmpdm_tcp.use_lbmpdm_tcp_domain: FALSE
# Set the UDP port for incoming multicast topic resolution (context resolver_multicast_incoming_port)
# A decimal number
#lbmr.mc_incoming_port: 12965
# Set the multicast address for incoming multicast topic resolution (context resolver_multicast_incoming_address)
# A string
#lbmr.mc_incoming_address: 224.9.10.11
# Set the UDP port for outgoing multicast topic resolution (context resolver_multicast_outgoing_port)
# A decimal number
#lbmr.mc_outgoing_port: 12965
# Set the multicast address for outgoing multicast topic resolution (context resolver_multicast_outgoing_address)
# A string
#lbmr.mc_outgoing_address: 224.9.10.11
# Set the low UDP port for unicast topic resolution (context resolver_unicast_port_low)
# A decimal number
#lbmr.uc_port_low: 14402
# Set the high UDP port for unicast topic resolution (context resolver_unicast_port_high)
# A decimal number
#lbmr.uc_port_high: 14406
# Set the destination port for unicast topic resolution (context resolver_unicast_destination_port)
# A decimal number
#lbmr.uc_dest_port: 15380
# Set the address of the unicast resolver daemon (context resolver_unicast_address)
# A string
#lbmr.uc_address: 0.0.0.0
# Use table of LBMR tags to decode the packet instead of above values
# TRUE or FALSE (case-insensitive)
#lbmr.use_lbmr_domain: FALSE
# Set the LBMSRS IP Address
# A string
#lbmsrs.source_ip_address: 127.0.0.1
# Set the source TCP port
# A decimal number
#lbmsrs.source_port: 0
# Use table of LBMSRS tags to decode the packet instead of above values
# TRUE or FALSE (case-insensitive)
#lbmsrs.use_lbmsrs_domain: FALSE
# Set the low end of the LBT-RM multicast address range (context transport_lbtrm_multicast_address_low)
# A string
#lbtrm.mc_address_low: 224.10.10.10
# Set the high end of the LBT-RM multicast address range (context transport_lbtrm_multicast_address_high)
# A string
#lbtrm.mc_address_high: 224.10.10.14
# Set the low end of the LBT-RM UDP destination port range (source transport_lbtrm_destination_port)
# A decimal number
#lbtrm.dport_low: 14400
# Set the high end of the LBT-RM UDP destination port range (source transport_lbtrm_destination_port)
# A decimal number
#lbtrm.dport_high: 14400
# Set the low end of the LBT-RM UDP source port range (context transport_lbtrm_source_port_low)
# A decimal number
#lbtrm.sport_low: 14390
# Set the high end of the LBT-RM UDP source port range (context transport_lbtrm_source_port_high)
# A decimal number
#lbtrm.sport_high: 14399
# Set the incoming MIM multicast address (context mim_incoming_address)
# A string
#lbtrm.mim_incoming_address: 224.10.10.21
# Set the outgoing MIM multicast address (context mim_outgoing_address)
# A string
#lbtrm.mim_outgoing_address: 224.10.10.21
# Set the incoming MIM UDP port (context mim_incoming_destination_port)
# A decimal number
#lbtrm.mim_incoming_dport: 14401
# Set the outgoing MIM UDP port (context mim_outgoing_destination_port)
# A decimal number
#lbtrm.mim_outgoing_dport: 14401
# Separate multiple NAKs from a single packet into distinct Expert Info entries
# TRUE or FALSE (case-insensitive)
#lbtrm.expert_separate_naks: FALSE
# Separate multiple NCFs from a single packet into distinct Expert Info entries
# TRUE or FALSE (case-insensitive)
#lbtrm.expert_separate_ncfs: FALSE
# Perform analysis on LBT-RM sequence numbers to determine out-of-order, gaps, loss, etc
# TRUE or FALSE (case-insensitive)
#lbtrm.sequence_analysis: FALSE
# Use table of LBT-RM tags to decode the packet instead of above values
# TRUE or FALSE (case-insensitive)
#lbtrm.use_lbtrm_domain: FALSE
# Set the low end of the LBT-RU source UDP port range (context transport_lbtru_port_low)
# A decimal number
#lbtru.source_port_low: 14380
# Set the high end of the LBT-RU source UDP port range (context transport_lbtru_port_high)
# A decimal number
#lbtru.source_port_high: 14389
# Set the low end of the LBT-RU receiver UDP port range (receiver transport_lbtru_port_low)
# A decimal number
#lbtru.receiver_port_low: 14360
# Set the high end of the LBT-RU receiver UDP port range (receiver transport_lbtru_port_high)
# A decimal number
#lbtru.receiver_port_high: 14379
# Separate multiple NAKs from a single packet into distinct Expert Info entries
# TRUE or FALSE (case-insensitive)
#lbtru.expert_separate_naks: FALSE
# Separate multiple NCFs from a single packet into distinct Expert Info entries
# TRUE or FALSE (case-insensitive)
#lbtru.expert_separate_ncfs: FALSE
# Perform analysis on LBT-RU sequence numbers to determine out-of-order, gaps, loss, etc
# TRUE or FALSE (case-insensitive)
#lbtru.sequence_analysis: FALSE
# Use table of LBT-RU tags to decode the packet instead of above values
# TRUE or FALSE (case-insensitive)
#lbtru.use_lbtru_domain: FALSE
# Set the low end of the LBT-TCP source TCP port range (context transport_tcp_port_low)
# A decimal number
#lbttcp.source_port_low: 14371
# Set the high end of the LBT-TCP source TCP port range (context transport_tcp_port_high)
# A decimal number
#lbttcp.source_port_high: 14390
# Set the low end of the LBT-TCP request TCP port range (context request_tcp_port_low)
# A decimal number
#lbttcp.request_port_low: 14391
# Set the high end of the LBT-TCP request TCP port range (context request_tcp_port_high)
# A decimal number
#lbttcp.request_port_high: 14395
# Set the low end of the LBT-TCP UME Store TCP port range
# A decimal number
#lbttcp.store_port_low: 0
# Set the high end of the LBT-TCP UME Store TCP port range
# A decimal number
#lbttcp.store_port_high: 0
# Use table of LBT-TCP tags to decode the packet instead of above values
# TRUE or FALSE (case-insensitive)
#lbttcp.use_lbttcp_domain: FALSE
# Enable this option to recognise all traffic on RTP dynamic payload type 96 (0x60) as FEC data corresponding to Pro-MPEG Code of Practice #3 release 2
# TRUE or FALSE (case-insensitive)
#2dparityfec.enable: FALSE
# Derive IID from a short 16-bit address according to RFC 4944 (using the PAN ID).
# TRUE or FALSE (case-insensitive)
#6lowpan.rfc4944_short_address_format: FALSE
# Linux kernels before version 4.12 does toggle the Universal/Local bit.
# TRUE or FALSE (case-insensitive)
#6lowpan.iid_has_universal_local_bit: FALSE
# Whether the IPv6 summary line should be shown in the protocol tree
# TRUE or FALSE (case-insensitive)
#6lowpan.summary_in_tree: TRUE
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context0:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context1:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context2:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context3:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context4:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context5:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context6:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context7:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context8:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context9:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context10:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context11:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context12:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context13:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context14:
# IPv6 prefix to use for stateful address decompression.
# A string
#6lowpan.context15:
# Some generators incorrectly indicate long preamble when the preamble was actuallyshort. Always assume short preamble when calculating duration.
# TRUE or FALSE (case-insensitive)
#wlan_radio.always_short_preamble: FALSE
# Some generators timestamp the end of the PPDU rather than the start of the (A)MPDU.
# TRUE or FALSE (case-insensitive)
#wlan_radio.tsf_at_end: TRUE
# Enables an additional panel for navigating through packets
# TRUE or FALSE (case-insensitive)
#wlan_radio.timeline: FALSE
# Radiotap has a bit to indicate whether the FCS is still on the frame or not. Some generators (e.g. AirPcap) use a non-standard radiotap flag 14 to put the FCS into the header.
# TRUE or FALSE (case-insensitive)
#radiotap.bit14_fcs_in_header: FALSE
# Some generators use rates with bit 7 set to indicate an MCS, e.g. BSD. others (Linux, AirPcap) do not.
# TRUE or FALSE (case-insensitive)
#radiotap.interpret_high_rates_as_mcs: FALSE
# Whether to use the FCS bit, assume the FCS is always present, or assume the FCS is never present.
# One of: Use the FCS bit, Assume all packets have an FCS at the end, Assume all packets don't have an FCS at the end
# (case-insensitive).
#radiotap.fcs_handling: Use the FCS bit
# Use ipaccess nanoBTS specific definitions for OML
# One of: ETSI/3GPP TS 12.21, Siemens, ip.access, Ericsson OM2000
# (case-insensitive).
#gsm_abis_oml.oml_dialect: ETSI/3GPP TS 12.21
# Enable Streaming DMX extension dissector (ANSI BSR E1.31)
# TRUE or FALSE (case-insensitive)
#acn.dmx_enable: FALSE
# Display format
# One of: Hex , Decimal, Percent
# (case-insensitive).
#acn.dmx_display_view: Hex
# Display zeros instead of dots
# TRUE or FALSE (case-insensitive)
#acn.dmx_display_zeros: FALSE
# Display leading zeros on levels
# TRUE or FALSE (case-insensitive)
#acn.dmx_display_leading_zeros: FALSE
# Display line format
# One of: 20 per line, 16 per line
# (case-insensitive).
#acn.dmx_display_line_format: 20 per line
# Server Port
# A decimal number
#adb_cs.server_port: 5037
# Dissect more detail for framebuffer service
# TRUE or FALSE (case-insensitive)
#adb_service.framebuffer_more_details: FALSE
# Specify if the Data sections of packets should be dissected or not
# TRUE or FALSE (case-insensitive)
#adwin.dissect_data: TRUE
# Include next/previous frame for channel, stream, and term, and other transport sequence analysis.
# TRUE or FALSE (case-insensitive)
#aeron.sequence_analysis: FALSE
# Include stream analysis, tracking publisher and subscriber positions. Requires "Analyze transport sequencing".
# TRUE or FALSE (case-insensitive)
#aeron.stream_analysis: FALSE
# Reassemble fragmented data messages. Requires "Analyze transport sequencing" and "Analyze stream sequencing".
# TRUE or FALSE (case-insensitive)
#aeron.reassemble_fragments: FALSE
# Use a registered heuristic sub-dissector to decode the payload data. Requires "Analyze transport sequencing", "Analyze stream sequencing", and "Reassemble fragmented data".
# TRUE or FALSE (case-insensitive)
#aeron.use_heuristic_subdissectors: FALSE
# Whether fragmented AFS PDUs should be reassembled
# TRUE or FALSE (case-insensitive)
#afs.defragment: FALSE
# Whether the AIM dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
# TRUE or FALSE (case-insensitive)
#aim.desegment: TRUE
# Whether the LCT header Codepoint field should be considered the FEC Encoding ID of carried object
# TRUE or FALSE (case-insensitive)
#alc.lct.codepoint_as_fec_id: TRUE
# How to decode LCT header extension 192
# One of: Don't decode, Decode as FLUTE extension (EXT_FDT)
# (case-insensitive).
#alc.lct.ext.192: Decode as FLUTE extension (EXT_FDT)
# How to decode LCT header extension 193
# One of: Don't decode, Decode as FLUTE extension (EXT_CENC)
# (case-insensitive).
#alc.lct.ext.193: Decode as FLUTE extension (EXT_CENC)
# Whether persistent call leg information is to be kept
# TRUE or FALSE (case-insensitive)
#alcap.leg_info: TRUE
# Set the TCP port for AMQP over SSL/TLS(if other than the default of 5671)
# A decimal number
#amqp.tls.port: 5671
# Dynamic payload types which will be interpreted as AMR; values must be in the range 1 - 127
# A string denoting an positive integer range (e.g., "1-20,30-40")
#amr.dynamic.payload.type:
# Dynamic payload types which will be interpreted as AMR-WB; values must be in the range 1-127
# A string denoting an positive integer range (e.g., "1-20,30-40")
#amr.wb.dynamic.payload.type:
# Type of AMR encoding of the payload