Decode Options

If there are site-global preferences that your organization needs, you can edit the global preferences file:

/usr/cloudshark/share/wireshark/preferences

In some cases, changing decode options can have a big impact on performance. Other options may impact a CloudShark analysis tool. We recommend that you only introduce new decode option after consulting support@qacafe.com or as directed by another support article.

You can restore CloudShark’s default behavior by updating this file to contain only the following:

tcp.desegment_tcp_streams: FALSE

Supported Preferences

By logging into your CloudShark system using ssh you can also get a list of the currently supported preferences and their default value by running the command:

/usr/cloudshark/bin/tshark -G currentprefs

Applying changes

To apply the changes to the global preferences file run the following command:

systemctl restart cloudshark-packet-viewer