Deep inspection of hundreds of protocols, with more being added all the time.

Its open source license allows talented experts in the networking community to add enhancements. The program has all of the standard features you would expect in a protocol analyzer, and several features not seen in any other product. The app is used by network professionals around the world for analysis, troubleshooting, software and protocol development, and education. Wireshark was written by networking experts around the world and is an example of the power of the open-source. Wireshark's powerful features make it the tool of choice for network troubleshooting, protocol development, and education worldwide. The name might be new, but the software is the same.

The newer one is called Npcap it is actively being maintained, and is based on a relatively recent version of libpcap, but is only available for Windows 7 and later versions of Windows.The Ethereal network protocol analyzer has changed its name to Wireshark. The older one is named WinPcap it is no longer actively being maintained, and is based on an older version of libpcap.

Two Windows versions of libpcap are available. (Specialized Linux distributions such as those for small embedded boxes might omit it.) It comes as part of most non-specialized Linux distributions, the free-software BSDs, and macOS it's installed by default on the BSDs and macOS, and it might be installed by default on the Linux distributions as well. On most modern UN*X platforms libpcap is available. More information can be found at the tcpdump project page libpcap and tcpdump are both developed by. Wireshark/TShark uses libpcap to capture live network data.Īs capture filter strings are directly passed from Wireshark/TShark to libpcap, the available capture filter syntax depends on the libpcap version installed.

Wireshark download macos