
Live capture and offline analysis are supported.
The most powerful display filters in the industry. Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer which is useful for remote capture, analysis, and scripting. Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others. Wireshark has a rich feature set which includes the following:
Hundreds of developers around the world have contributed to it, and it it still under active development.
It is the continuation of a project that started in 1998. Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry.