Wireshark Configuration Profile

Features

Eye P.A. Frame Coloring

Watch 802.11 stations exchange frames! Management frames are colored purple, control frames are orange, and data frames are blue, making frame exchanges super mega easy to track.

Bad Frame Coloring

Malformed frames and frames that fail checksums are colored red.

EAP and EAPOL Frame Coloring

See 4-way handshakes and RADIUS exchanges! Cool!

Frame Sub-Type Column

See frame sub-types in a column! It's a hack, but it works!

Marked Retries

The frame type column marks retries without changing the color. Nice! 

Hide Frame Types

"Hide Bad", "Hide Data", "Hide Management", and "Hide Control" shortcut buttons mean that there are 4 less regular expressions for you to remember and type. You're welcome!

Installation Instructions

1. Download the file.

2. Unzip the contents, which will be a folder called "MetaGeek Profile"

3. Add the unzipped folder to the "profiles" folder.

Note: On macOS, you can do this by opening Wireshark, enter CMD+Shift+A, then click directory path on bottom right of dialog box. Copy unzipped folder into profiles folder in that directory

4. Activate the profile in the lower right corner of Wireshark.

Release Notes

(17-10-13)

• First release
• There are probably issues :)

(18-03-12)

•  Added Mac installation instructions (credit: Zaib Kaleem)