Configure the F5 Wireshark Plugin

Wireshark version 3.2.1 is installed on the jumpbox.

Wireshark 2.6 and greater have the F5 ethtrailer plugin already installed. You will have to update one setting in Wireshark to get it fully working:

  1. With Wireshark open browse to Analyze -> Enabled Protocols -> Search for F5.

  2. Select the checkbox for F5ethtrailer.

  3. Select OK.

  4. In Wireshark select Edit, then Preferences, Expand Protocols and scroll down to Ethernet. Select Never for Assume padding for short frames with trailer.

    ../../_images/wireshark-ethernet-protocol.png

If you have a version before 3.0 of wireshark you will need to download and install the F5 Wireshark plugin.

You can download the F5 Wireshark plugin from devcentral.f5.com here: https://devcentral.f5.com/s/articles/getting-started-with-the-f5-wireshark-plugin-on-windows. In the lab the plugin is already downloaded to /home/f5student/Downloads/wireshark/.

  1. Start Wireshark by double clicking the shortcut on the desktop.

  2. Click on Help and then About Wireshark.

  3. Click on the plugins tab and check to see what directory the plugins are installed to.

  4. Open the plugin directory in file explorer.

  5. Copy the F5 wireshark plugin that you downloaded from devcentral.f5.com to the plugins directory you found in the Help, About Wireshark options.

  6. Depending on your OS and Wireshark version, you will need the correct plugin files from the correct folder.

  7. Shutdwon Wireshark and restart it.

  8. Click on Help and then About Wireshark.

  9. Check the plugins tab again and make sure the F5 plugin is installed.

    ../../_images/wireshark-plugin.png