Wireshark

Wireshark is a powerful network protocol analyzer that lets you see what's happening on your network at a microscopic level.

Download Notice

1. Visit Wireshark's download page
2. Select the appropriate package for your operating system
3. Note: Admin/root privileges may be required for installation

Installation

macOS

• Using Homebrew: brew install --cask wireshark
• Download DMG from official website

Windows

• Using Chocolatey: choco install wireshark
• Download and run installer from official website

Linux

• Using apt: sudo apt install wireshark
• Using dnf: sudo dnf install wireshark
• Other distributions: Check package manager or download from website

Basic Configuration

1. Initial setup:
   • Configure capture privileges
   • Set up interface permissions
   • Install WinPcap/Npcap (Windows)
2. Customize interface:
   • Configure column display
   • Set color rules
   • Customize filters
3. Optional features:
   • Configure protocol preferences
   • Set up name resolution
   • Enable expert info

Features

• Live packet capture
• Deep protocol inspection
• Powerful display filters
• VoIP analysis
• Multi-platform support
• Decryption support
• Protocol dissection
• Read/write many capture formats
• Advanced statistics
• Rich VoIP analysis
• Output in various formats
• Lua scripting support
• Command line tools
• Remote capture support

Summary

Wireshark is an essential tool for network administrators, security researchers, developers, and anyone interested in understanding network protocols and troubleshooting network issues. Its open-source nature and active community make it the de facto standard for network analysis.