Wireshark Is The World's Foremost Network Protocol Analyzer. It Lets You Capture And Interactively Browse The Traffic Running On A Computer Network. It Is The De Facto (and Often De Jure) Standard Across Many Industries And Educational Institutions.
Feature:
- Deep Inspection Of Hundreds Of Protocols, With More Being Added All The Time
- Live Capture And Offline Analysis
- Standard Three-pane Packet Browser
- Multi-platform: Runs On Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, And Many Others
- Captured Network Data Can Be Browsed Via A GUI, Or Via The TTY-mode TShark Utility
- The Most Powerful Display Filters In The Industry
- Rich VoIP Analysis
- Read/write Many Different Capture File Formats: Tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS Iplog, Microsoft Network Monitor, Network General Sniffer® (compressed And Uncompressed), Sniffer® Pro, And NetXray®, Network Instruments Observer, NetScreen Snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, And Many Others
- Capture Files Compressed With Gzip Can Be Decompressed On The Fly
- Live Data Can Be Read From Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, And Others (depending On Your Platform)
- Decryption Support For Many Protocols, Including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, And WPA/WPA2
- Coloring Rules Can Be Applied To The Packet List For Quick, Intuitive Analysis
- Output Can Be Exported To XML, PostScript®, CSV, Or Plain Text