Wireshark
Free, open-source network protocol analyzer with a graphical packet browser and deep protocol decoding.
- Verified facts
- 5 of 5
- Alternatives ranked
- 3
- Approved reviews
- 0
- Visits sent from here
- 0
About Wireshark
Wireshark is the best-known network protocol analyzer: it captures traffic live or opens saved capture files, then decodes each packet in a three-pane view showing the packet list, the protocol tree and the raw bytes. It understands hundreds of protocols, from Ethernet and TCP up to DNS, TLS, VoIP and industrial protocols, and offers display filters, conversation and stream following, statistics and graphs. A command-line version called TShark covers the same analysis in a terminal. The project began in 1998 (as Ethereal), is free and open source under the GPL 2.0, and is run by the Wireshark Foundation with sponsors and a large contributor community. It runs on Windows, macOS, Linux and the BSDs; on Windows it bundles Npcap for live capture. It's widely used by network engineers, security teams and students. The flip side of its depth is a busy interface and a learning curve, and it's more than most people need just to see which app is using bandwidth.
Best for: Network engineers, security analysts and students who need to inspect traffic packet by packet.
Pros and cons
What works
- Decodes hundreds of protocols in detail
- Live capture and offline analysis of pcap files
- TShark command-line tool included for scripts and servers
- Free and open source, with extensive docs and training material
Why people leave
- Dense interface with a real learning curve
- Live capture needs extra drivers or elevated permissions
- Overkill for simply checking bandwidth use per app
- Decrypting TLS traffic needs session keys set up separately
Top Wireshark alternatives
See all 3- 1
mitmproxy61.8Focused on HTTP and HTTPS, letting you intercept and change requests rather than just view packets.
- 2
Proxyman61.8Native Mac app for inspecting HTTP(S) traffic from apps and devices, much simpler to learn.
- 3
Charles Proxy59.4GUI web debugging proxy that is easier for inspecting app and website HTTP traffic.
Why people left Wireshark
In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.
No switching stories yet. If you moved away from Wireshark, review the app you switched to and tell us why.
Reviews
No approved reviews yet. How we verify reviewers
Write a review of Wireshark
Wireshark: common questions
Is Wireshark free?
Yes. Wireshark is free, open-source software.
Is Wireshark open source?
Yes. The source code is on GitHub at wireshark/wireshark.
What platforms does Wireshark run on?
Wireshark is available for Windows, macOS and Linux.
What are the best alternatives to Wireshark?
The highest-ranked Wireshark alternatives right now are mitmproxy, Proxyman and Charles Proxy. See the full ranked list for pricing, platforms and verified facts.