User Guide

138
Chapter 10. Customizing Wireshark
10.1. Introduction
Wireshark's default behaviour will usually suit your needs pretty well. However, as you become more
familiar with Wireshark, it can be customized in various ways to suit your needs even better. In this chapter
we explore:
• How to start Wireshark with command line parameters
• How to colorize the packet list
• How to control protocol dissection
• How to use the various preference settings
10.2. Start Wireshark from the command line
You can start Wireshark from the command line, but it can also be started from most Window managers
as well. In this section we will look at starting it from the command line.
Wireshark supports a large number of command line parameters. To see what they are, simply enter the
command wireshark -h and the help information shown in Example 10.1, “Help information available
from Wireshark” (or something similar) should be printed.