Wireshark is the world's foremost network protocol analyzer, and is the standard in many industries. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it is still under active development. Read/write many different capture file formats: tcpdump (libpcap), Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, NAI Sniffer (compressed and uncompressed), Sniffer Pro, and NetXray, Network Instruments Observer, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, and WildPackets EtherPeek/TokenPeek/AiroPeek.
Features
- Wireshark has a rich feature set which includes the following:
- Hundreds of protocols are supported, with more being added all the time
- Live capture and offline analysis are supported
- Standard three-pane packet browser
- Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
- Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility
- The most powerful display filters in the industry
- Rich VoIP analysis
- Read/write many different capture file formats: tcpdump (libpcap), Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others
- Capture files compressed with gzip can be decompressed on the fly
- Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platfrom)
- Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SSL/TLS, WEP, and WPA/WPA2
- Coloring rules can be applied to the packet list, which eases analysis
- Output can be exported to XML, PostScript®, CSV, or plain text
Requirements: Windows 2000/XP/2003/Vista, Mac OS X, Linux
|
|
Wireshark 0.99.8 Released
Wireshark 0.99.8 has been released. Security-related vulnerabilities
in the SCTP, SNMP, and TFTP dissectors have been fixed. See the
advisory for details.
This release adds configuration profiles, temporary coloring rules, enhanced
I/O graphs, WLAN traffic statistics, and many other useful features.
For a complete list of changes, please refer to the
0.99.8 release notes.
Official releases are available right now from the
download page.