Supported protocols are still growing, the number going by the hundreds. Live data can be read from Ethernet, IEEE 802.Wireshark is a network protocol analyzer that has become a standard across several industries.Capture files compressed with gzip can be decompressed on the fly.Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer (compressed and uncompressed), Sniffer Pro, and NetXray, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others.The most powerful display filters in the industry.

Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility.Deep inspection of hundreds of protocols, with more being added all the time.You can use Wireshark for both personal and commercial use without paying any fee. If you’re still using Ethereal, it is strongly recommended that you upgrade to Wireshark as Ethereal is unsupported and has known security vulnerabilities. Wireshark allows the user to put the network interfaces that support promiscuous mode into that mode, in order to see all traffic visible on that interface, not just traffic addressed to one of the interface’s configured addresses and broadcast / multicast traffic.

It is developed and maintained by a global team of protocol experts, and it is an example of a disruptive technology. It’s a cross-platform tool, using the Qt widget toolkit in current releases to implement its user interface, and using pcap to capture packets.

It’s the de facto (and often de jure) standard across many industries and educational institutions. It lets you capture and interactively browse the traffic running on a computer network. Wireshark is a popular network protocol analyzer.

Download Wireshark 4.0.6