Wireshark For Network Protocol Analyser

Developed by an international team of networking experts, Wireshark is a powerful network protocol analyser which runs on UNIX, OS X and Windows. It is said to be used by network professionals around the world for analysis, troubleshooting, software and protocol development and education.
Key Features:
This application is said to have all of the standard features that are expected in a protocol analyzer, where its open source license allows talented experts in the networking community to add enhancements.

• The structure of different networking protocols is understood, where in the ability to display the encapsulation and the fields along with their meanings of different packets are specified by different networking protocols
• Data is capable of being captured “from the wire” from a live network connection or read from a file that recorded already-captured packets
• Live data can be read from a number of types of network, including Ethernet, IEEE 802.11, PPP, and loopback
• Captured network data can be browsed via a GUI, or via the terminal (command line) version of the utility, TShark
• Captured files can be programmatically edited or converted via command-line switches to the “editcap” program
• Data display can be refined using a display filter
• Plug-ins can be created for dissecting new protocols
• VoIP calls in the captured traffic can be detected. If encoded in a compatible encoding, the media flow can even be played
• Raw USB traffic can be captured with Wireshark, a feature which is currently available only under Linux
• Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2
• Rich VoIP analysis
• Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, etc.
GO4 Wireshark

Leave a Response