User Guide

Files and Folders
203
File/Folder Description Unix/Linux
folders
Windows folders
subnets IPv4 subnet name
resolution.
/etc/subnets,
$HOME/.wireshark/
subnets
%WIRESHARK%\subnets, %APPDATA%
\Wireshark\subnets
ipxnets IPX name
resolution.
/etc/ipxnets,
$HOME/.wireshark/
ipxnets
%WIRESHARK%\ipxnets, %APPDATA%
\Wireshark\ipxnets
plugins Plugin directories. /usr/share/
wireshark/
plugins, /usr/local/
share/wireshark/
plugins,
$HOME/.wireshark/
plugins
%WIRESHARK%\plugins\<version>,
%APPDATA%\Wireshark\plugins
temp Temporary files. Environment:
TMPDIR
Environment: TMPDIR or TEMP
Windows folders
%APPDATA% points to the personal configuration folder, e.g.: C:\Documents
and Settings\<username>\Application Data (details can be found at:
Section A.3.1, “Windows profiles”),
%WIRESHARK% points to the Wireshark program folder, e.g.: C:\Program Files
\Wireshark
Unix/Linux folders
The /etc folder is the global Wireshark configuration folder. The folder actually used on
your system may vary, maybe something like: /usr/local/etc.
$HOME is usually something like: /home/<username>
preferences/wireshark.conf This file contains your Wireshark preferences, including defaults
for capturing and displaying packets. It is a simple text file
containing statements of the form:
variable: value
The settings from this file are read in at program start and written
to disk when you press the Save button in the "Preferences" dialog
box.
recent This file contains various GUI related settings like the main window
position and size, the recent files list and such. It is a simple text
file containing statements of the form:
variable: value
It is read at program start and written at program exit.