Wireshark is a free and open-source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education.
•Data can be captured "from the wire" from a live network connection or read from a file that records the already-captured packets.
•Live data can be read from a number of types of network, including Ethernet, IEEE 802.11, PPP, and loop-back.
•Captured network data can be browsed via a GUI, or via the terminal (command line) version of the utility, tshark.
•Captured files can be programmatically edited or converted via command-line switches to the "editcap" program.
•Data display can be refined using a display filter.
•Plug-ins can be created for dissecting new protocols.
Wireshark is cross-platform, using the GTK+ widget tool-kit to implement its user interface, and using pcap to capture packets; it runs on various Unix-like operating systems including Linux, Mac OS X, BSD, and Solaris, and on Microsoft Windows. Released under the terms of the GNU General Public License, Wireshark is free software.
