Wireshark-users: [Wireshark-users] Capture interface preferences?
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 25 Nov 2013 19:31:03 -0800
Wireshark currently has some global capture preferences and a bunch of per-interface preferences.

When it starts, it uses those preferences as the default; if you override them in a capture, the new settings are remembered and are the default for the next capture in the same session.  If you quit and restart Wireshark, it reverts to the preferences.

Would it be preferable to remember the settings from session to session, so that if you quit and restart Wireshark, it defaults to the settings from the previous capture?

If so, is there any reason to keep the preferences?  The preferences are also used as the defaults for TShark, so getting rid of the preferences would mean that you couldn't set its defaults; it could use the last settings from Wireshark, but that might be a little surprising.  Note that changing the preferences without using Wireshark means manually editing the preferences file and/or some other files.