Wireshark is a network protocol analyzer for capturing and inspecting network traffic.
Field note
Wireshark is a network protocol analyzer that lets you capture and interactively browse the traffic running on a computer network. It supports hundreds of protocols and provides deep inspection capabilities.
Capabilities
Tags
Ways to use it
Not filed / npcap
Product features
Customize packet list coloring.
Track and analyze network conversations.
Available for Windows, macOS, and Linux.
Inspect hundreds of protocols.
Filter packets using display filter expressions.
Provide expert analysis of packet anomalies.
Export capture files for other programs.
Import and export capture files in many formats.
Available under GNU General Public License version 2.
Provides a graphical interface for interactive browsing of network traffic.
Deep inspection of hundreds of protocols.
Import capture files from other programs.
Capture live network traffic.
Capture packets from many different network media.
Available on UNIX/POSIX and Windows systems.
Released under the GNU General Public License.
Hundreds of protocol dissectors for deep packet inspection.
Generate statistics for protocols.
Documentation of changes for each Wireshark version.
Follow TCP or UDP streams.
Library for reading and writing capture files.