Tool
Wireshark
Inspect captured application and device traffic as decoded protocol fields, with filtering and shared GUI/TShark dissection. Custom dissectors let an analyst encode newly understood packet formats and compare protocol implementations.
- Targets
- App · Firmware · Protocol
- Category
- Protocol analysis tools
- Relationship
- Foundation tool
- Sources reviewed
Requirements & limits
- Use a supported Windows, macOS or Linux/Unix build and a compatible capture file. Live capture additionally needs a supported interface, capture driver and appropriate capture permissions.
- Media support depends on the operating system and hardware. Custom formats need an appropriate dissector; packet inspection does not automatically recover a peer's full implementation.
- Distributed under GNU GPLv2, with additional component notices. The GitLab repository is upstream; GitHub is its official read-only mirror.
About this entry
The description was reviewed against primary sources.
Primary sources
- https://gitlab.com/wireshark/wireshark/-/blob/e1087b1870cfc7686b229836dda8838c8f45ea0f/README.md
- README.md GitHub · wireshark/wireshark · Revision e1087b1
- https://www.wireshark.org/docs/wsug_html_chunked/ChapterIntroduction.html
- https://www.wireshark.org/docs/wsug_html_chunked/ChIntroPlatforms.html
- https://www.wireshark.org/docs/wsdg_html_chunked/ChapterDissection.html