Analysis software

All industry standard analyzers are supported and can be used to perform the analysis.

Wireshark is recommended, and can be downloaded at wireshark.org.

To start capturing network data, launch the preferred network analyzer and select the ProfiShark device, which should appear in the list of network interfaces.

The Extcap Tool allows you to get high-resolution hardware timestamps in live Wireshark capture. It is aimed to replace the dissector, as it provides hardware nanosecond timestamps without altering the packets.

Copy both the extcap binary file and API .dll from the ProfiShark USB key's 'Windows\Extcap Tool Wireshark' subfolder to the Wireshark 'Global Extcap' path. This path can be found in Wireshark through the following menu path: Help → About Wireshark → Folders.

Restart Wireshark. A new capture interface will be displayed in the list of capture interfaces. Its name should be in the form 'ProfiShark <MAC address>'. By capturing on this interface, you will get hardware nanosecond timestamps in Wireshark.

Copy the extcap binary file from the ProfiShark USB key's '\Linux\Extcap Tool Wireshark\profishark-extcap-linux64_1.0.tar.gz' archive to the Wireshark 'Global Extcap' path. This path can be found in Wireshark through the following menu path: Help → About Wireshark → Folders.

Restart Wireshark. A new capture interface will be displayed in the list of capture interfaces. Its name should be in the form 'ProfiShark <MAC address>'. By capturing on this interface, you will get hardware nanosecond timestamps in Wireshark.

The ProfiShark dissector for Wireshark is used to properly display high-resolution timestamps in live Wireshark capture without the Extcap Tool (see Live Capture with Wireshark Dissector).

Copy the 'profishark.dll' file from the ProfiShark USB key's 'Windows\Dissector Wireshark\dist' subfolder corresponding to your Wireshark version and Windows version, to your Wireshark installation folder's 'plugins' subfolder.

For Wireshark 2.6 and later, the dll must be copied to the 'plugins\*\epan' folder.

The dissector can be enabled or disabled in Wireshark through the following menu path: Edit → Preferences → Protocols → ProfiShark.

In the ProfiShark USB key's 'Linux/Dissector Wireshark/' directory, run the following commands:

sudo dpkg -i /path/deb/file
sudo apt-get install -f

The dissector can be enabled or disabled in Wireshark through the following menu path: Edit → Preferences → Protocols → ProfiShark.

Copy the 'profishark.so' file from the ProfiShark USB key's 'macOS/Dissector Wireshark' subfolder corresponding to your Wireshark version, to your Wireshark installation folder's 'plugins' subfolder. Navigate to 'Applications' in Finder, right-click the Wireshark.app Application Bundle and click 'Show Package Contents'.

For Wireshark 2.6 and later, the plugin file must be copied to the '/Applications/Wireshark.app/Contents/PlugIns/wireshark/*/epan' folder.

The dissector can be enabled or disabled in Wireshark through the following menu path: Edit → Preferences → Protocols → ProfiShark.

  • Last modified: April 2, 2024