Wireshark
November 04, 2016

Wireshark

Anonymous | TrustRadius Reviewer
Score 7 out of 10
Vetted Review
Verified User

Overall Satisfaction with Wireshark

Wireshark is being used across our organization to trouble shoot all network related issues. We are also using it to trouble shoot application speed issues between locations.
  • Wireshark provides an immense amount of data. If the data is being sent you will be able to track it.
  • Will flag some notable information if you don't know what you are looking for.
  • Can analyze VoIP data as well.
  • It can be difficult to parse and filter data without working with Wireshark for a while. The amount of data can be overwhelming for first time users.
  • We have had difficulties getting it to run properly with MacOS
  • We were able to track a speed issue in our ERP system to an issue with one of our switches, saved us from having to pay for the outside vendor to come in an analyse the situation. Saved $7500 easily.
  • Wireshark is used often in our day to day.
  • tcpdump
Wireshark is much easier to use, Wireshark can parse/filter and display more lines of data and has a more modern GUI.
Wireshark can be used to find speed issues for an internal application slowing down between geographical locations. Wireshark works well for tracking down unmanaged switches and hubs that are causing issues in our network.

If you have no idea what your are looking for, Wireshark may not be the way to go. Also when tracking issues with a web application, as there are easier tools to use for that.

Using Wireshark

45 - Information Technology
Wireshark does not need to be supported as it is a trouble shooting tool
  • Correcting network speed issues
  • Tracking communication issues within internal applications
  • We were able to use wireshark to track down a communication issue with our ERP software and the database server it used to speed up the system considerably. Before that fix we were considering replacing the whole system.
  • Troubleshooting network issues as they arise.

Evaluating Wireshark and Competitors

Yes - We replaced Tcpdump with Wireshark. Tcpdump was a legacy system that couldn't analyze the amount of data that Wireshark could and was difficult to train new employees on.
  • Price
  • Product Features
We wouldn't, Wireshark has worked out well for our organization.

Wireshark Implementation

Simple and easy setup.
No - Wireshark does not require extensive implementation. It is a relatively minor setup.
Not sure - None was needed, it is a system used by technicians to troubleshoot issues. We do not centrally control versioning, and changes have had little impact.
  • None, was simple and easy.

Using Wireshark

While Wireshark is difficult to use, it is still the best of the packet sniffers.
ProsCons
Technical support not required
Well integrated
Consistent
Feel confident using
Unnecessarily complex
Slow to learn
  • Not many, there is a bit of a learning curve that exists with all competing software as well.
  • Filtering data can be difficult.
  • Integrating with homegrown software is difficult.
Not Sure - Have never used it if it exists. I cannot imagine the amount of data being analyzed would make a mobile application useful.