Skip to main content
TrustRadius
Wireshark

Wireshark

Overview

What is Wireshark?

Wireshark is a free and open source network troubleshooting tool.

Read more

Learn from top reviewers

Return to navigation

Pricing

View all pricing

Wireshark

Free

On Premise

Entry-level set up fee?

  • No setup fee

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services
Return to navigation

Product Demos

Local and Remote Sniffing with Wireshark

YouTube

Wireshark demo (simple http)

YouTube

Saving Files From Wireshark

YouTube

Brim Demo

YouTube

How to Use Wireshark's Follow TCP Stream Feature

YouTube

Wireshark SIP Capture

YouTube
Return to navigation

Product Details

What is Wireshark?

Wireshark is a free and open source network troubleshooting tool.

Wireshark Technical Details

Deployment TypesOn-premise
Operating SystemsWindows, Linux, Mac
Mobile ApplicationNo

Frequently Asked Questions

Wireshark is a free and open source network troubleshooting tool.

Wireshark starts at $0.

Reviewers rate Usability and Support Rating highest, with a score of 10.

The most common users of Wireshark are from Mid-sized Companies (51-1,000 employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews From Top Reviewers

(1-5 of 32)

The king of software for capturing and analyzing network traffic

Rating: 10 out of 10
October 31, 2022
Vetted Review
Verified User
Wireshark
3 years of experience
Wireshark software is used every day by me and my IT team as a specific tool for capturing and analyzing traffic on our networks. It is super intuitive and complete to identify the different types of protocols that travel through our network and identify anomalies, failures, and prevention of attack problems. We have been using Wireshark for about 3 years, and only with this tool do we have deep details of the inbound and outbound traffic of our lan and wlan network, and we do daily analysis and reports to always seek the best performance and security.
  • Ease of capturing and analyzing incoming and outgoing network traffic.
  • It allows offline analysis of inspected and captured packages.
  • Excellent and friendly interface.
  • Large community with great support and advanced feature tips.
  • Windows compatible.
Cons
  • It is bad for parsing very large packets.
  • It takes time and patience to analyze all packages.
Wireshark is made up of advanced features for capturing packets and analyzing network protocols and can be used to capture different network cards and technologies such as wifi and BlueTooth. We recommend the use of this tool by all IT professionals as it is fundamental for the security of the network and identifies everything that is traveling on the network by protocol, ports, and IPs and then analyzes it to solve problems and security flaws with the internet.

The best packet analyzer to monitor the application traffic.

Rating: 10 out of 10
October 29, 2022
Vetted Review
Verified User
Wireshark
4 years of experience
Have done troubleshooting of network traffic using this software. It’s helped to dissect the problem up to the granular level of network packets. It was great help identify the the handshake issue algorithm compatibility issues with the database server and client. Without the Wireshark it would be hard to navigate to the root cause of the issue.
  • Network packets
  • Detailed information
  • Troubleshooting
Cons
  • Learning on how to use.
  • More documentation
  • View of the application
Any network traffic can be dissected and analyzed. This will help greatly in in finding the problem with the application traffic. I have worked on database upgrade and we had connection drop while loading the database data in batch from application server. With Wireshark was able to identify the handshake algorithm used in communications and was able to find the comparability over the windows versions.

Wireshark is free for those who like to snoop without limitations

Rating: 10 out of 10
September 25, 2018
KH
Vetted Review
Verified User
Wireshark
12 years of experience
We/I use Wireshark to capture and to analyze both wireless and wired network traffic. It is an absolutely required tool for any system administrator or network administrator. Our entire IT department uses it. Wireshark is both free and open source software, which, for what it does, saves us a lot of money. This graphical tool is easy to use and makes network packet analysis far less painful than if we had to rely just on the command line. Using Wireshark, we can analyze network traffic for further analysis ourselves or we can capture it and send it as a pcap file to a security consultant for further investigation. It is an essential part of our administrative toolbox.
  • Wireshark is easy to use and to collect network traffic with.
  • Wireshark color codes network packets based on which type of packet has been captured. This makes the analysis much quicker.
  • Wireshark has a lot of different filters that can be applied either during capture or during analysis to filter out uninteresting packets from the feed.
  • You can download and use a standalone (not installed) version to run on USB thumb drives or other external media in case you want to analyze a potentially compromised system in place.
Cons
  • Wireshark requires elevated privileges, which can either be bad or good depending on your perspective.
  • It has the standard disadvantage of capturing packets that might not reflect actual network traffic because the data is captured locally. Not a flaw of Wireshark, specifically, but of any locally run sniffing software.
  • It can be confusing for new users to see all the columns and colors. You can do a lot of customization but it takes some effort.
Wireshark is best suited to capturing and analyzing network traffic data. It is not an intrusion detection system (IDS), or a honeypot, or any real-time security tool. Offline analysis is where Wireshark shines. Take a capture using it or some other tool and load it into Wireshark for extensive analysis. Wireshark is great for forensic analysis of network traffic. You can find malformed packets, attack signatures, suspicious traffic, etc. Nothing gets by Wireshark.

Great Tool to Network Toubleshoot

Rating: 10 out of 10
March 31, 2017
YS
Vetted Review
Verified User
Wireshark
5 years of experience
Wireshark is used both in the network team and helpdesk team. It helps us to identify and troubleshoot network connectivity issues.
  • It can help us to determine the network issue such as if it would be at the application level or network routing issue.
  • It also can identify how the source and destination communicate.
  • It can track the network traffic to determine the actually network flow.
Cons
  • I find it's pretty easy to use and have been a fan of it.
It's one of the best network tools for our network engineers.

Wireshark, a network engineer's secret weapon

Rating: 10 out of 10
July 27, 2021
Vetted Review
Verified User
Wireshark
5 years of experience
Wireshark is used across all of our client sites for in-depth network troubleshooting. Out of all the tools we have at our disposal, the ability to install a managed switch inline with a problematic device and/or workstation allows our technicians to deep dive into the network traffic and locate the issue.
  • Network Troubleshooting
  • Packet Analysis
  • Traffic Filtering
Cons
  • GUI Interface
  • Product Support
  • Product Training
Wireshark is great for enterprise networks with large amounts of data traversing the network that need a way to filter and inspect specific traffic by specific parameters (i.e. destination / source IP address, host, or type). There are use-cases for smaller environments, but the amount of time needed to learn how to effectively use the tool may not be beneficial for home / small office users.
Return to navigation