Wireshark-users: [Wireshark-users] protocols to keep enabled?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Lee <ler762@xxxxxxxxx>
Date: Wed, 30 Nov 2016 11:20:54 -0500
Is there a write-up somewhere showing which protocols should be
enabled for different scenarios?

I did a capture & the source picked tcp port 4556 for sending so
wireshark decides it's "tcp bundle" protocol and displays much
garbage.
Analyze / Enabled Protocols
remove the checkmark next to Bundle
click on Save

and garbage goes away :)   But while I was there I noticed about 500
lines of Bluetooth GATT protocols; I'm guessing that I'm not going to
be looking at any bluetooth anything, so _way_ too many clicks later
all that is turned off.  Any recommendations on what else should be
turned off?

Thanks,
Lee