User Guide

Files and Folders
208
Right-clicking on a TCP protocol detail item will display a help menu item that displays the Wikipedia
page for TCP. Right-clicking on the TCP destination or source ports will display additional help menu
items that take you to the "TCP ports" section of the page.
The [location data] and ${PATH} can be omitted if they are not needed. For example, the following
configuration is functionally equivalent to the previous configuration:
[database]
source=Wikipedia
version=1
location=http://en.wikipedia.org/wiki/
[map]
tcp=TCP
[TCP]
_OVERVIEW=Transmission_Control_Protocol
Destination port=Transmission_Control_Protocol#TCP_ports
Source port=Transmission_Control_Protocol#TCP_ports
A.3. Windows folders
Here you will find some details about the folders used in Wireshark on different Windows versions.
As already mentioned, you can find the currently used folders in the About Wireshark dialog.
A.3.1. Windows profiles
Windows uses some special directories to store user configuration files which define the "user profile".
This can be confusing, as the default directory location changed from Windows version to version and
might also be different for English and internationalized versions of Windows.
Note!
If you've upgraded to a new Windows version, your profile might be kept in the former
location, so the defaults mentioned here might not apply.
The following guides you to the right place where to look for Wireshark's profile data.
7/Vista C:\Users\<username>\AppData\Roaming
\Wireshark
XP/2000 C:\Documents and Settings\<username>
\Application Data, "Documents and Settings" and
"Application Data" might be internationalized.
NT 4 (no longer supported by
Wireshark)
C:\WINNT\Profiles\<username>\Application
Data\Wireshark
ME/98 - with enabled user
profiles (no longer supported by
Wireshark)
In Windows ME and 98 you can enable separate user
profiles. In that case, something like: C:\windows\Profiles
\<username>\Application Data\Wireshark is used.
ME/98/95 (no longer supported
by Wireshark)
The default in Windows ME/98/95 is: all users work with the
same profile, which is located at: C:\windows\Application
Data\Wireshark