Wireshark 1.12.1 / 1.99.0 Development

A handy network protocol analyzer
When your computer is constantly connected to the Internet or to a network, it is vulnerable to attacks and malware infections. In addition to using a powerful and updated antivirus solution, you can also use a network analysis tool to identify the malicious packets and block them. Such an application is Wireshark and it comes with no price tag.

When deploying Wireshark on your computer, you have the possibility to choose the plugins and extensions you want to install, such as the Dissector plugin, Tree Statistics, SNMP MIBs or the Meta Analysis and Tracing Engine.

Since these utilities are meant to provide a wider range of information about your network traffic and they can be easily disabled, it is advisable to install them as well. The same advice applies to the additional tools included in the setup and to the recommended file associations for the trace files found on your PC.  

The final step before finalizing the initial configuration is for the setup to check whether you have WinPcap installed on your computer, and to install it if it is missing. If you are using several network cards, Wireshark allows you to choose the one you want to use for capturing the network traffic. Once the capture has begun, you can monitor all the connections and their corresponding details – you also get the chance to create filters so as to track only certain types of connections.

Another way to make sure you correctly monitor the type of packets you want is to apply color schemes for each type of connection, so that the most important ones are the most visible. If you are not satisfied with the color templates provided by Wireshark, you can create your own custom one, by specifying the shade you prefer and the string to be monitored.

Wireshark also comes with a Statistics function that can be used to generate reports to be analyzed at a later time. Depending on your necessities, you can choose to view the details of the protocol hierarchy, endpoint, packet lengths or the IO graph.

Overall, Wireshark can come in handy to all those who want to be in control of their network connections and limit them whenever needed. However, it does take an expert to use the app to its full potential.

Reviewed by on May 2nd, 2013

Also available: Portable Wireshark


our in-depth analysis
Editor's Review
EXCELLENT
last updated on:
October 8th, 2014, 6:15 GMT
file size:
27.1 MB
price:
FREE!
developed by:
Gerald Combs
license type:
Freeware
operating system(s):
Windows XP / XP 64 bit / Vista / Vista 64 bit / 7 / 7 64 bit / 2003 / 2008 / 2008 64 bit / 2008 R2 / Server 2012
category:
C: \ Network Tools \ Protocol Analyzers/Sniffers
download hub:
Network Sniffers ( + 1 other )

FREE!

In a hurry? Add it to your Download Basket!

softpedia rating

4.5/5

user rating 160

4.4/5
 

0/5

16 Screenshots
Wireshark - You can access all the options and menus of the software from the main window.Wireshark - The right click context menu present in the software lets you mark or ignore packets.Wireshark - This is how you can use the integrated File menu to export SSL session keys and objects.WiresharkWiresharkWiresharkWiresharkWiresharkWiresharkWiresharkWiresharkWiresharkWiresharkWiresharkWiresharkWireshark
What's New in version 1.99.0 Development
  • The following features are new (or have been significantly updated):
  • The I/O Graph in the Gtk+ UI now supports an unlimited number of data points (up from 100k).
  • TShark now resets its state when changing files in ring-buffer mode.
  • Expert Info severities can now be configured.
read full changelog
 

Application description

The Ethereal network protocol analyzer has changed its name to Wireshark.The name might be new, but the software is th...

Add your review!

SUBMIT