We're now a non-profit! Support open source packet analysis by making a donation.

What's New

Wireshark 4.2.0 Released

November 15, 2023

What’s New

This is the first major Wireshark release under the Wireshark Foundation, a nonprofit which hosts Wireshark and promotes protocol analysis education. The foundation depends on your contributions in order to do its work. If you or your employer would like to contribute or become a sponsor, please visit wiresharkfoundation.org.

Wireshark supports dark mode on Windows.

A Windows installer for Arm64 has been added.

Packet list sorting has been improved.

Wireshark and TShark are now better about generating valid UTF-8 output.

A new display filter feature for filtering raw bytes has been added.

Display filter autocomplete is smarter about not suggesting invalid syntax.

Tools  MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.

The enterprises, manuf, and services configuration files have been compiled in for improved start-up times. These files are no longer available in the master branch in our source code repository. You can download the manuf file from our automated build directory.

The installation target no longer installs development headers by default.

The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).

Wireshark can be compiled on Windows using MSYS2. Check the Developer’s guide for instructions.

Wireshark can be cross-compiled for Windows using Linux. Check the Developer’s guide for instructions.

Tools  Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.

Windows installer file names now have the format Wireshark-<version>-<architecture>.exe.

Wireshark now supports the Korean language.

Many other improvements have been made. See the “New and Updated Features” section below for more details.

Bug Fixes

The following bugs have been fixed:

  • Issue 18413 - RTP player do not play audio frequently on Windows builds with Qt6.

  • Issue 18510 - Playback marker does not move after resume with Qt6.

New and Updated Features

The following features are new (or have been significantly updated) since version 4.2.0rc3:

  • Nothing of note.

The following features are new (or have been significantly updated) since version 4.2.0rc2:

  • The Windows installers now ship with Npcap 1.78. They previously shipped with Npcap 1.77.

The following features are new (or have been significantly updated) since version 4.2.0rc1:

  • The Windows installers now ship with Npcap 1.77. They previously shipped with Npcap 1.71.

The following features are new (or have been significantly updated) since version 4.1.0:

  • Improved dark mode support.

  • The Windows installers now ship with Qt 6.5.3. They previously shipped with Qt 6.2.3.

The following features are new (or have been significantly updated) since version 4.0.0:

  • The API has been updated to ensure that the dissection engine produces valid UTF-8 strings.

  • Wireshark now builds with Qt6 by default. To use Qt5 instead pass USE_qt6=OFF to CMake.

  • The "ciscodump" extcap supports Cisco IOS XE 17.x.

  • The default interval between GUI updates when capturing has been decreased from 500ms to 100ms, and is now configurable.

  • The -n option also now disables IP address geolocation information lookup in configured MaxMind databases (and geolocation lookup can be enabled with -Ng.) This is most relevant for TShark, where geolocation lookups are synchronous.

  • The display filter drop-down list is now sorted by "most recently used" instead of "most recently created".

  • Display filter syntax-related changes:

    • It is now possible to filter on raw packet data for any field by using the syntax @some.field == <bytes…​>. This can be useful to filter on malformed UTF-8 strings, among other use cases where it is necessary to look at the field’s raw data.

    • Negation (unary minus) now works with any display filter arithmetic expression.

    • Using the slice operator with strings produces a string. Previously it would produce a byte array. This is useful to index/slice UTF-8 multibyte strings. String byte slices can still be obtained using the "@" (raw operator) prefix.

    • Arithmetic expressions are allowed as set elements.

    • Absolute date and time values can be written as Unix time.

    • The limitation where a minus sign needed to be preceded by a space character has been removed.

    • Added XOR logical operator.

    • Fixed the implementation of all …​ in membership operator (#19188).

    • When parsing absolute time values the display filter engine has learned to understand timezones as specified in strptime(3), including some common North American designations. Arbitrary timezone names are not supported however. Previously only ISO8601 offsets and the "UTC" designation was understood.

    • Writing value strings without double quotes is deprecated and will generate a warning. Value strings are integer or boolean values that can be represented using a user-friendly textual format, such as "Set"/"Unset" instead of numerical values like 1 and 0. It is now a requirement that value strings need to be written enclosed in double-quotes.

    • The deprecated ~≃ operator symbol has been removed. It was replaced by !== in version 4.0.

  • Running the test suite requires the pytest Python module. The emulation layer that allowed running tests without pytest installed has been removed.

  • When saving files or exporting packets after changing their time with the "Time Shift" dialog, the shifted time is written to the new file.

  • TLS secrets used in decrypting packets can be embedded (or discarded) from the capture file via the GUI, similar to the options --inject-secrets and --discard-all-secrets in editcap.

  • The text of any configured column (displayed or hidden) can be filtered anywhere that filters are used - in display filters, filters in taps, coloring rules, Wireshark read filters, and the -Y, -R, and -e options to TShark, the "Apply as Filter" GUI option, etc.

    • The filter field names are prefixed by "_ws.col", followed by a lowercase version of the COL_ name found in epan/column-utils.h, e.g. "_ws.col.info" or "_ws.col.protocol"

    • Using the column names as a filter is slower than other filter types because the columns must be constructed, so when the same filtering can be achieved via other fields, prefer that.

  • The external name resolution text files "manuf", "enterprises" and "services" have been removed and replaced with static binary data. You can dump the respective internal data using tshark -G manuf|enterprises|services.

  • The "manuf" file is now also read from the personal configuration folder, and is profile-based.

  • The Lua console dialogs under the Tools menu were refactored and redesigned. It now consists of a single dialog window for input and output.

  • Wireshark now shows byte units in the statistics in the user-selected language (uses the system default language by default).

  • Packet list sorting has been improved:

    • When sorting packet list with a filter applied, only the visible packets are sorted, which greatly increases sorting speed.

    • The cache size for column text is limited to a default of 10000 rows, which limits the maximum memory usage. The maximum value can be changed in Preferences→Appearance→Layout

    • Due to the above, columns that require packet dissection can only be sorted if the number of visible rows is less than the cache size. If there are more rows visible, a warning will appear. Columns that do not require packet dissection (those that calculated directly from the capture file frame headers, such as packet number, time, and frame length) can be sorted with any number of visible rows.

    • Sorting can be interrupted.

  • When changing the dissector via the "Decode As" table for values that have default dissectors registered, selecting "(none)" will select no dissection (while still allowing heuristic dissectors to attempt to dissect.) The previous behavior was to reset the dissector to the default. To facilitate resetting the dissector, the default dissector is now sorted at the top of the list of possible dissector options.

  • The personal extcap plugin folder location on Unix has been changed to follow existing conventions for architecture-dependent files. The extcap personal folder is now $HOME/.local/lib/wireshark/extcap. Previously it was $XDG_CONFIG_HOME/wireshark/extcap.

  • The "init.lua" file is now loaded from any of the Lua plugin directories. Previously it was loaded from the personal configuration directory. (For backward-compatibility this is still allowed; note that deprecated features may be removed in a future release).

  • Installation of development headers must be done explicitly using the CMake command cmake --install <builddir> --component Development.

  • The Windows build has a new SpeexDSP external dependency (https://www.speex.org). The speex code that was previously bundled has been removed.

  • New --print-timers option added to TShark.

Removed Features and Support

  • With the addition of the universal and consistent filtering support for column text, the previous support in the -e option to TShark for displaying column text via the column title has been removed in general. Those field names cannot be used elsewhere (as they may not be legal filter names) and create confusion if more than one column has the same title or if a column is renamed. Prefer the column format instead, e.g. "_ws.col.info" for "_ws.col.Info". However, for backwards compatibility with existing tools and scripts, the titles of the default columns can continue to be used with tshark -e (but not elsewhere.)

  • The bundled script "dtd_gen.lua" that was disabled by default has been removed from the installation. It can be found in the Wireshark Wiki under "Contrib".

  • The Wi-Fi NAN dissector filter name has been changed from 'nan' to 'wifi_nan'.

New File Format Decoding Support

RTPDump

New Protocol Support

Aruba UBT, ASAM Capture Module Protocol (CMP), ATSC Link-Layer Protocol (ALP), DECT DLC protocol layer (DECT-DLC), DECT NWK protocol layer (DECT-NWK), DECT proprietary Mitel OMM/RFP Protocol (also named AaMiDe), Digital Object Identifier Resolution Protocol (DO-IRP), Discard Protocol, FiRa UWB Controller Interface (UCI), FiveCo’s Register Access Protocol (5CoRAP), Fortinet FortiGate Cluster Protocol (FGCP), GPS L1 C/A LNAV navigation messages, GSM Radio Link Protocol (RLP), H.224, High Speed Fahrzeugzugang (HSFZ), Hypertext Transfer Protocol version 3 (HTTP/3), ID3v2, IEEE 802.1CB (R-TAG), Iperf3, JSON 3GPP, Low Level Signalling (ATSC3 LLS), Management Component Transport Protocol (MCTP), Management Component Transport Protocol - Control Protocol (MCTP CP), Matter home automation protocol, Microsoft Delivery Optimization, Multi-Drop Bus (MDB), Non-volatile Memory Express - Management Interface (NVMe-MI) over MCTP, RDP audio output virtual channel Protocol (rdpsnd), RDP clipboard redirection channel Protocol (cliprdr), RDP Program virtual channel Protocol (RAIL), SAP Enqueue Server (SAPEnqueue), SAP GUI (SAPDiag), SAP HANA SQL Command Network Protocol (SAPHDB), SAP Internet Graphic Server (SAP IGS), SAP Message Server (SAPMS), SAP Network Interface (SAPNI), SAP Router (SAPROUTER), SAP Secure Network Connection (SNC), SBAS L1 Navigation Messages (SBAS L1), SINEC AP1 Protocol (SINEC AP), SMPTE ST2110-20 (Uncompressed Active Video), Train Real-Time Data Protocol (TRDP), UBX protocol of u-blox GNSS receivers (UBX), UDP Tracker Protocol for BitTorrent (BT-Tracker), UWB UCI Protocol, Video Protocol 9 (VP9), VMware HeartBeat, Windows Delivery Optimization (MS-DO), Z21 LAN Protocol (Z21), Zabbix, ZigBee Direct (ZBD), and Zigbee TLV

Updated Protocol Support

  • JSON: The dissector now has a preference to enable/disable "unescaping" of string values. By default it is off. Previously it was always on.

  • JSON: The dissector now supports "Display JSON in raw form".

  • IPv6: The dissector has a new preference to show some semantic details about addresses (default off).

  • IPv6: The dissector now supports dissecting the Application-aware IPv6 Networking (APN6) option in the Hop-by-Hop Options Header (HBH) and Destination Options Header (DOH), including all three types of APN ID, which are 32-bit, 64-bit and 128-bit in length.

  • XML: The dissector now supports display character according to the "encoding" attribute of the XML declaration, and has a new preference to set default character encoding for some XML document without "encoding" attribute.

  • SIP: The dissector now has a new preference to set default charset for displaying the body of SIP messages in raw text view.

  • HTTP: The dissector now supports dissecting chunked data in streaming reassembly mode. Subdissectors of HTTP can register itself in "streaming_content_type" subdissector table for enabling streaming reassembly mode while transferring in chunked encoding. This feature ensures the server stream messages of GRPC-Web over HTTP/1.1 can be dissected even if the last chunk is absent.

  • The media type dissector table now properly treats media types and subtypes as case-insensitive automatically, per RFC 6838. Media types no longer need to be lower cased before registering or looking up in the table.

  • CFM: The dissector has been overhauled and updated to the level of IEEE std 802.1Q-2022 and ITU-T Rec. G.8013/Y.1371 (08/2015). This includes dissection of additional PDU types and TLVs as well as deeper dissection of existing PDUs and TLVs.

Too many other protocol updates have been made to list them all here.

New and Updated Codec support

Adaptive Multi-Rate (AMR), if compiled with opencore-amr.

Major API Changes

  • Lua function "package.prepend_path" has been removed. If you need it please consider adding your own package.path customization code or installing your dependencies in Wireshark’s default paths.

  • The reassemble_streaming_data_and_call_subdissector() API has been added to provide a simpler way to reassemble the streaming data of a high level protocol that is not on top of TCP.

  • Some of the API now uses C99 types instead of GLib types. Issue 19116

Wireshark 4.0.11 and 3.6.19 Released

November 15, 2023

Wireshark 4.0.11 and 3.6.19 have been released. Installers for Windows, Mac OS X 10.14 and later, and source code are now available.

In 4.0.11

Two vulnerabilities have been fixed. See the release notes for details.

For a complete list of changes, please refer to the 4.0.11 release notes.

In 3.6.19

One vulnerability has been fixed. See the release notes for details.

For a complete list of changes, please refer to the 3.6.19 release notes.

Official releases are available right now from the download page.

What's Not As New

Wireshark 4.2.0rc3 Release Candidate · October 25, 2023

Wireshark 4.2.0rc2 Release Candidate · October 18, 2023

Wireshark 4.2.0rc1 Release Candidate · October 5, 2023

Wireshark 4.0.10 and 3.6.18 Released · October 4, 2023

Wireshark 4.0.9 and 3.6.17 Released · October 4, 2023

Wireshark 4.0.8 and 3.6.16 Released · August 23, 2023

Wireshark 4.0.7 and 3.6.15 Released · July 12, 2023

Wireshark 4.0.6 and 3.6.14 Released · May 24, 2023

Wireshark 4.0.5 and 3.6.13 Released · April 12, 2023

Wireshark 4.0.4 and 3.6.12 Released · March 2, 2023

Announcing the Wireshark Foundation · March 1, 2023

Wireshark 4.0.3 and 3.6.11 Released · January 18, 2023

Wireshark 4.0.2 and 3.6.10 Released · December 7, 2022

Wireshark 4.0.1 and 3.6.9 Released · October 26, 2022

Wireshark 4.0.0 Released · October 4, 2022

Wireshark 4.0.0rc2 Release Candidate · September 14, 2022

Wireshark 3.6.8 and 3.4.16 Released · September 7, 2022

Wireshark 3.7.0 Development Release · August 25, 2022

Wireshark 4.0.0rc1 Release Candidate · August 16, 2022

Wireshark 3.7.2 Development Release · July 28, 2022

Wireshark 3.6.7 and 3.4.15 Released · July 27, 2022

Wireshark 3.7.1 Development Release · June 27, 2022

Wireshark 3.6.6 Released · June 15, 2022

Wireshark 3.7.0 Development Release · May 11, 2022

Wireshark 3.6.5 Released · May 5, 2022

Wireshark 3.6.4 and 3.4.14 Released · May 4, 2022

Wireshark 3.6.3 and 3.4.13 Released · March 23, 2022

Wireshark 3.6.2 and 3.4.12 Released · February 10, 2022

Sysdig Sponsorship Video · January 20, 2022

We Have a New Sponsor! · January 13, 2022

Wireshark 3.6.1 and 3.4.11 Released · December 29, 2021

Statement on Log4j · December 15, 2021

Wireshark 3.6.0 Released · November 22, 2021

Wireshark 3.4.10 and 3.2.18 Released · November 17, 2021

Wireshark 3.6.0rc3 Release Candidate · November 11, 2021

Wireshark 3.6.0rc2 Release Candidate · October 27, 2021

Wireshark 3.6.0rc1 Release Candidate · October 13, 2021

Wireshark 3.4.9 and 3.2.17 Released · October 6, 2021

Wireshark 3.5.0 Development Release · August 27, 2021

Wireshark 3.4.8 and 3.2.16 Released · August 25, 2021

Wireshark 3.4.7 and 3.2.15 Released · July 14, 2021

Wireshark 3.4.6 and 3.2.14 Released · June 2, 2021

Wireshark 3.4.5 and 3.2.13 Released · April 21, 2021

Wireshark 3.4.4 and 3.2.12 Released · March 10, 2021

Wireshark 3.4.3 and 3.2.11 Released · January 29, 2021

Wireshark 3.4.2 and 3.2.10 Released · December 18, 2020

Wireshark 3.4.1 and 3.2.9 Released · December 9, 2020

Wireshark 3.4.0 and 3.2.8 Released · October 29, 2020

Wireshark 3.4.0rc1 Release Candidate · October 22, 2020

Wireshark 3.3.1 Development Release · October 1, 2020

Wireshark 3.2.7, 3.0.14, and 2.6.20 Released · September 23, 2020

Wireshark 3.3.0 Development Release · September 15, 2020

Wireshark 3.2.6, 3.0.13, and 2.6.19 Released · August 12, 2020

Wireshark 3.2.5, 3.0.12, and 2.6.18 Released · July 1, 2020

Wireshark 3.2.4, 3.0.11, and 2.6.17 Released · May 19, 2020

Wireshark 3.2.3, 3.0.10, and 2.6.16 Released · April 8, 2020

Wireshark 3.2.2, 3.0.9, and 2.6.15 Released · February 26, 2020

Wireshark 3.2.1, 3.0.8, and 2.6.14 Released · January 15, 2020

Wireshark 3.2.0 Released · December 18, 2019

Wireshark 3.2.0rc2 Release Candidate · December 11, 2019

Wireshark 3.2.0rc1 Release Candidate · December 5, 2019

Wireshark 3.0.7 and 2.6.13 Released · December 4, 2019

Wireshark 3.1.1 Development Release · November 18, 2019

Wireshark 3.0.6 and 2.6.12 Released · October 23, 2019

Wireshark 3.0.5 Released · September 20, 2019

Wireshark 3.0.4 and 2.6.11 Released · September 11, 2019

Wireshark 3.1.0 Development Release · July 25, 2019

Wireshark 3.0.3, 2.6.10 and 2.4.16 Released · July 17, 2019

Wireshark 3.0.2, 2.6.9 and 2.4.15 Released · May 21, 2019

Wireshark 3.0.1, 2.6.8 and 2.4.14 Released · April 8, 2019

Wireshark 3.0.0 Released · February 28, 2019

Wireshark 2.6.7 and 2.4.13 Released · February 27, 2019

Wireshark 3.0.0rc2 Released · February 21, 2019

Wireshark 3.0.0rc1 Released · February 15, 2019

Wireshark 2.6.6 and 2.4.12 Released · January 8, 2019

Wireshark 2.9.0 Development Release · December 12, 2018

Wireshark 2.6.5 and 2.4.11 Released · November 28, 2018

Wireshark 2.6.4 and 2.4.10 Released · October 11, 2018

Wireshark 2.6.3, 2.4.9 and 2.2.17 Released · August 29, 2018

Wireshark 2.6.2, 2.4.8 and 2.2.16 Released · July 18, 2018

Wireshark 2.6.1, 2.4.7 and 2.2.15 Released · May 22, 2018

Wireshark 2.6.0 Released · April 24, 2018

Wireshark 2.4.6 and 2.2.14 Released · April 3, 2018

Wireshark 2.5.1 Development Release · March 15, 2018

Wireshark 2.4.5 and 2.2.13 Released · February 23, 2018

Wireshark 2.5.0 Development Release · February 6, 2018

Wireshark 2.4.4 and 2.2.12 Released · January 11, 2018

Wireshark 2.4.3 and 2.2.11 Released · November 30, 2017

Wireshark 2.4.2, 2.2.10, and 2.0.16 Released · October 10, 2017

Wireshark 2.4.1, 2.2.9, and 2.0.15 Released · August 29, 2017

Wireshark 2.4.0 Released · July 19, 2017

Wireshark 2.2.8 and 2.0.14 Released · July 18, 2017

Wireshark 2.4.0rc2 Released · June 28, 2017

Wireshark 2.4.0rc1 Released · June 7, 2017

Wireshark 2.2.7 and 2.0.13 Released · June 1, 2017

Wireshark 2.2.6 and 2.0.12 Released · April 12, 2017

Wireshark 2.2.5 and 2.0.11 Released · March 3, 2017

Wireshark 2.2.4 and 2.0.10 Released · January 23, 2017

Wireshark 2.2.3 and 2.0.9 Released · December 14, 2016

Wireshark 2.2.2 and 2.0.8 Released · November 16, 2016

Wireshark 2.2.1 and 2.0.7 Released · October 4, 2016

Wireshark 2.0.6 Released · September 8, 2016

Wireshark 2.2.0 Released · September 7, 2016

Wireshark 2.2.0rc2 · August 31, 2016

Wireshark 2.2.0rc1 · August 22, 2016

Wireshark 2.0.5 and 1.12.13 Released · July 27, 2016

Wireshark 2.1.1 Development Release · July 14, 2016

Wireshark 2.1.0 Development Release · June 8, 2016

Wireshark 2.0.4 and 1.12.12 Released · June 7, 2016

Wireshark 2.0.3 and 1.12.11 Released · April 22, 2016

Wireshark 2.0.2 and 1.12.10 Released · February 26, 2016

Wireshark 2.0.1 and 1.12.9 Released · December 29, 2015

Wireshark 2.0.0 Released · November 18, 2015

Wireshark 2.0.0rc3 Released · November 11, 2015

Wireshark 2.0.0rc2 Released · October 30, 2015

Wireshark 2.0.0rc1 Released · October 14, 2015

Wireshark 1.12.8 Released · October 14, 2015

Wireshark 1.99.9 Development Release · September 2, 2015

Wireshark 1.12.7 Released · August 12, 2015

Wireshark 1.99.8 Development Release · July 24, 2015

Wireshark 1.99.7 Development Release · June 18, 2015

Wireshark 1.12.6 Released · June 17, 2015

Wireshark 1.99.6 Development Release · May 28, 2015

Wireshark 1.12.5 and 1.10.14 Released · May 12, 2015

Wireshark 1.99.5 Development Release · March 20, 2015

Wireshark 1.99.4 Development Release · March 19, 2015

Wireshark 1.99.3 Development Release · March 5, 2015

Wireshark 1.12.4 and 1.10.13 Released · March 4, 2015

Wireshark 1.99.2 Development Release · February 4, 2015

Wireshark 1.12.3 and 1.10.12 Released · January 7, 2015

Wireshark 1.99.1 Development Release · December 10, 2014

Wireshark 1.12.2 and 1.10.11 Released · November 12, 2014

Wireshark 1.99.0 Development Release · October 7, 2014

Wireshark 1.12.1 and 1.10.10 Released · September 16, 2014

Wireshark 1.12.0 and 1.10.9 Released · July 31, 2014

Wireshark 1.12.0rc3 Released · July 22, 2014

Wireshark 1.12.0rc2 Released · June 13, 2014

Wireshark 1.10.8 and 1.8.15 Released · June 12, 2014

Wireshark 1.10.7 and 1.8.14 Released · April 22, 2014

Wireshark 1.11.3 Development Release · April 15, 2014

Wireshark 1.10.6 and 1.8.13 Released · March 7, 2014

Wireshark 1.10.5 Released · December 19, 2013

Wireshark 1.10.4 and 1.8.12 Released · December 17, 2013

Wireshark 1.11.2 Development Release · November 18, 2013

Wireshark 1.11.0 Development Release · November 15, 2013

Wireshark 1.10.3 and 1.8.11 Released · November 1, 2013

Wireshark 1.11.0 Development Release · October 15, 2013

Wireshark 1.10.2 and 1.8.10 Released · September 10, 2013

Wireshark 1.10.1 and 1.8.9 Released · July 26, 2013

Wireshark 1.8.8 and 1.6.16 Released and 1.6 End of Life · June 7, 2013

Wireshark 1.10.0 Released · June 5, 2013

Wireshark 1.10.0rc2 Released · May 22, 2013

Wireshark 1.8.7 and 1.6.15 Released · May 17, 2013

Wireshark 1.10.0rc1 Released · April 26, 2013

Wireshark 1.9.1 Development Release · March 28, 2013

Wireshark 1.9.1 Development Release · March 12, 2013

Wireshark 1.8.6 and 1.6.14 Released · March 6, 2013

Wireshark 1.9.0 Development Release · February 20, 2013

Wireshark 1.8.5 and 1.6.13 Released · January 29, 2013

Wireshark Wiki Security Incident · January 9, 2013

Wireshark 1.8.4 and 1.6.12 Released · November 28, 2012

Wireshark 1.8.3 and 1.6.11 Released · October 2, 2012

Wireshark 1.8.2 and 1.6.10 Released · August 15, 2012

Wireshark 1.4.14 Released · July 24, 2012

Wireshark 1.8.1 and 1.6.9 Released · July 23, 2012

Wireshark 1.8.0 Released · June 21, 2012

Wireshark 1.8.0rc2 Released · June 18, 2012

Wireshark 1.8.0rc1 Released · June 6, 2012

Wireshark 1.6.8 and 1.4.13 Released · May 22, 2012

Wireshark 1.7.1 Development Release · April 6, 2012

Wireshark 1.6.7 Released · April 6, 2012

Wireshark 1.6.6 and 1.4.12 Released · March 27, 2012

Wireshark 1.6.5 and 1.4.11 Released · January 10, 2012

Wireshark 1.6.4 Released · November 18, 2011

Wireshark 1.7.0 Development Release · November 8, 2011

#1 on SecTools.Org · November 7, 2011

Wireshark 1.6.3 and 1.4.10 Released · November 1, 2011

We're Essential · September 19, 2011

Wireshark 1.6.2 and 1.4.9 Released · September 8, 2011

Wireshark 1.6.1 and 1.4.8 Released · July 18, 2011

Wireshark 1.6.0 Released · June 7, 2011

Wireshark 1.6.0rc2 Released · June 2, 2011

Wireshark 1.4.7 and 1.2.17 Released · May 31, 2011

Wireshark 1.6.0rc1 Released · May 16, 2011

Wireshark 1.4.6 Released · April 18, 2011

Wireshark 1.4.5 and 1.2.16 Released · April 15, 2011

Wireshark 1.5.1 Development Release · April 11, 2011

Wireshark 1.4.4 and 1.2.15 Released · March 1, 2011

Wireshark 1.5.0 Development Release · January 24, 2011

Wireshark 1.4.3 and 1.2.14 Released · January 11, 2011

Wireshark 1.4.2 and 1.2.13 Released · November 19, 2010

Riverbed Acquires CACE Technologies · October 21, 2010

CACE Pilot, WiFi Pilot, and Shark Appliance 2.4 Released · October 20, 2010

Wireshark 1.4.1 and 1.2.12 Released, 1.0.<i>x</i> EOL · October 11, 2010

Wireshark 1.4.0, 1.2.11, and 1.0.16 Released · August 30, 2010

"Wireshark Antivirus" Malware · August 4, 2010

We're SourceForge.net's Project of the Month! · August 1, 2010

End of Life Announcement for Wireshark 1.0 · July 31, 2010

Wireshark 1.2.10, 1.0.15, and 1.4.0rc2 Released · July 29, 2010

Wireshark 1.2.9, 1.0.14, and 1.4.0rc1 Released · June 9, 2010

Wireshark 1.2.8, 1.0.13, and 1.3.5 Released · May 5, 2010

Wireshark 1.2.7, 1.0.12, and 1.3.4 Released · March 31, 2010

Wireshark Wins PC Magazine Editor's Choice Award · February 22, 2010

Wireshark 1.3.3 Development Release · February 11, 2010

Wireshark 1.2.6 and 1.0.11 Released · January 27, 2010

CACE Pilot and WiFi Pilot 2.2 Released · January 18, 2010

Wireshark 1.2.5 Released · December 17, 2009

Wireshark 1.3.2 Development Release · November 24, 2009

Wireshark 1.2.4 Released · November 16, 2009

Wireshark 1.2.3, 1.0.10, and 1.3.1 Released · October 27, 2009

Wireshark 1.2.2, 1.0.9, and 1.3.0 Released · September 15, 2009

CACE Pilot and WiFi Pilot 2.1 Released · September 1, 2009

CACE Pilot 2.0 Released · July 28, 2009

Wireshark 1.2.1 Released · July 20, 2009

Nmap 5 Released · July 16, 2009

Wireshark 1.2 Released · June 15, 2009

Wireshark 1.2.0pre2 Released · June 9, 2009

Wireshark 1.2.0pre1 Released · May 27, 2009

Free Wireshark Jumpstart Seminars From Laura Chappell · May 22, 2009

Wireshark 1.0.8 Released · May 21, 2009

Another Day, Another New York Times Article · May 14, 2009

Wireshark Helps Expose Spy Ring · May 12, 2009

Announcing WiFi Pilot · May 7, 2009

Wireshark 1.0.7 Released · April 8, 2009

A Pile Of Great Keynotes At Sharkfest '09 · March 24, 2009

Wireshark 1.1.3 Development Release · March 23, 2009

Conficker Loves Us! · March 12, 2009

Wireshark 1.0.6 Released · February 6, 2009

CACE Pilot 1.2 released · January 23, 2009

Wireshark 1.1.2 Development Release · January 15, 2009

Wireshark 1.0.5 Released · December 10, 2008

New Video: Custom Columns (Plus Bonus Wireshark University Updates) · December 9, 2008

New Book: Nmap Network Scanning · December 3, 2008

Wireshark classes from Mike Pennacchi and Chris Sanders · November 7, 2008

tcpdump 4.0.0 / libpcap 1.0.0 released · October 28, 2008

New Article: Using Wireshark and TShark display filters for troubleshooting · October 22, 2008

Wireshark 1.0.4 Released · October 20, 2008

Meet Gerald At Laura Chappell's Troubleshooting and Security Summit · October 10, 2008

Wireshark 1.1.1 Development Release · October 9, 2008

Wireshark 1.1.0 Development Release · September 14, 2008

Sign Up Now for Laura Chappell's Troubleshooting and Security Summit · September 3, 2008

Wireshark 1.0.3 Released · September 3, 2008

Wireshark Wins 2008 InfoWorld BOSSIE Award · August 4, 2008

Wireshark is 10! (Plus two bonus announcements) · July 14, 2008

Wireshark 1.0.2 Released · July 10, 2008

Wireshark 1.0.1 Released · June 30, 2008

Announcing TurboCap · June 26, 2008

New Article: Open Source Founders Reflect On Project Milestones · April 22, 2008

Announcing Pilot · April 16, 2008

New Video: TCP Connection Loss · April 7, 2008

Sharkfest Was Great! · April 3, 2008

Wireshark 1.0 Released · March 31, 2008

Server Outage · March 20, 2008

Wireshark 0.99.8 Released · February 27, 2008

Vint Cerf at Sharkfest! · February 19, 2008

New Video: Analyzing DNS Queries · February 4, 2008

New Video: ICMP Redirection (plus a Tech Talk) · January 7, 2008

Wireshark 0.99.7 Released · December 18, 2007

New Mirror in Indonesia · December 16, 2007

Nmap is 10 · December 14, 2007

New Video: Advanced IO Graphing · November 5, 2007

German Tutorial from Mirko Kulpa · November 1, 2007

In Memoriam: Jun-ichiro Hagino · October 30, 2007

New Article: Time to Roll Your Own 802.11n Standard · October 5, 2007

New Video: Faulty Padding · September 24, 2007

First Annual SHARKFEST Announced · September 12, 2007

Wireshark Wins 2007 InfoWorld BOSSIE Award · September 10, 2007

New Article: SPAN Port or TAP? CSO Beware · September 9, 2007

New Article: Analyzing TCP Performance with Wireshark · August 17, 2007

Wireshark 0.99.6a Windows Installer Released · July 9, 2007

Wireshark 0.99.6 Released · July 5, 2007

New Article: Creating Your Own Custom Wireshark Dissector · July 2, 2007

New Video: Building ACL Rules · July 2, 2007

Wireshark at LinuxWorld 2007 · June 27, 2007

New tool: WPA PSK Generator · June 22, 2007

New Book: Practical Packet Analysis · May 23, 2007

eWEEK Says We're Important · May 2, 2007

Wireshark! Live! Helpdesk · April 1, 2007

Wireshark University Announced · March 19, 2007

New Mirror in Hungary · March 2, 2007

New Mirror in Germany · February 21, 2007

McAfee VirusScan False Positive · February 13, 2007

Wireshark 0.99.5 Released · February 1, 2007

WinPcap 4.0 Released · January 29, 2007

3Com Says We're "Best-Of-Breed" · January 29, 2007

New Mirror in the U.S. · January 22, 2007

New Mirror in the Netherlands · January 5, 2007

MacOS X Package Available · January 4, 2007

Article in COMPUTERWOCHE.de · November 14, 2006

Wireshark 0.99.4 Released · October 31, 2006

Wireshark Training Available for Q1 2007 · October 23, 2006

Site Outage · September 18, 2006

Wireshark 0.99.3 Released · August 23, 2006

Wireshark 0.99.2 Released · July 17, 2006

Tutorial and Podcast from Chris Sanders · July 14, 2006

Symantec Antivirus False Positive · July 4, 2006

We're (still) #2! · June 21, 2006

Ethereal&#174; is now Wireshark&#8482; · June 7, 2006