Overview
Wireshark is a network protocol analyzer for capturing and inspecting traffic on Linux, macOS, Windows, and other systems. Alongside its Qt interface, it ships TShark, a command-line analyzer using the same dissectors, capture formats, and filtering code.
Based on official documentation; not hands-on tested · Content checked:
Capture traffic and inspect protocols packet by packet
Wireshark captures packets through libpcap or Npcap and reads and writes many capture-file formats. The graphical application and line-oriented TShark share the analysis core, while bundled tools such as editcap transform capture files and remove selected packets.
Sources: [1]
For incident diagnosis, protocol checks, and saved-capture analysis
It fits operators, security practitioners, and developers who need packet-level evidence of network behavior. The interactive GUI and script-friendly TShark provide different ways to use the same analysis engine.
Sources: [1]
Prepare capture permissions and use the canonical GitLab project
Live capture requires operating-system-specific capture libraries, permissions, and interface setup. This GitHub repository is a read-only mirror; pull requests and bug reports belong in the GitLab project. Review the GNU GPLv2 and related license terms named by the README before redistribution.
Sources: [1]
Official sources
- [1]Wireshark README(2026-09-13)
Supplemental curator note
Selected because its GitHub mirror gathers a much larger discovery signal than the canonical GitLab project while related tools repeatedly reference the original brand.
Growth trends
Last 30 days
9,866 Stars
Trend data is still being collected.
Built with
- C
Categories and tags
Categories
GitHub Topics
- wireshark
- packet-capture
- tshark
- stratoshark
GitHub dataView detailed GitHub data
- Stars
- 9,866
- Forks
- 2,207
- Watchers
- 305
- Open issues
- 0
- Contributors
- 358
- Primary language
- C
- License
- GPL-2.0
- Repository last updated
- Sep 12, 2026
Explore next
- Sherlock91,396 Stars
A Python OSINT CLI that checks username-based account candidates across social networks.
Python - Trivy37,887 Stars
A scanner for vulnerabilities, SBOM data, misconfigurations, secrets, and licenses across containers, Kubernetes, and repositories.
Go - Web-Check34,771 Stars
An all-in-one website OSINT tool that takes a URL and surfaces DNS, SSL, WHOIS, ports, subdomains, HTTP headers, cookies, technology stack, and many other checks in one interface.
TypeScript - Vouch5,099 Stars
A community trust-management system where maintainers explicitly vouch for or denounce contributors, with a CLI and GitHub Actions for controlling participation in issues and pull requests.
Nushell - Networking Toolbox2,667 Stars
An offline-first web toolbox that brings subnetting, CIDR, DNS/DNSSEC, TLS, BGP, and many other networking utilities into one place, with local calculators and keyless APIs.
Svelte
Report incorrect information
Tell us if any listing information is incorrect or outdated.