Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Wireshark Causing SMB Query

From: Jim Aragon <Jim@xxxxxxxxxxxxxxxxx>
Date: Sun, 03 Mar 2013 01:31:02 -0800
At 01:11 AM 3/3/2013, Guy Harris wrote:

>On Mar 2, 2013, at 11:08 PM, Jim Aragon <Jim@xxxxxxxxxxxxxxxxx> wrote:

>> my PC sent an SMB query for a file or directory called ".wireshark"
>in my home directory,

>Wireshark stores its preferences file, and a bunch of other
>configuration information, in a directory named .wireshark under your
>home directory.

>If the directory doesn't exist, Wireshark will just use the default
>preference settings, etc.; the absence of such a directory is not an
>error.  If you change a preference, Wireshark will create the
>directory if it needs to store a file in it.

The "preferences" file is stored on the USB flash drive under \PortableApps\WiresharkPortable\data\, as are the "recent," "recent_common," and "geoip_db_paths" files, and the "profiles" subdirectory. What preferences would go in .wireshark? I've changed many preferences, and created 11 different profiles and Wireshark has not created a .wireshark directory.

Jim