What is Wireshark?
Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education.
What’s New
We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. Issue 17779
Bug Fixes
The following vulnerabilities have been fixed:
-
wnpa-sec-2022-09 Multiple dissector infinite loops.
-
wnpa-sec-2022-10 Kafka dissector memory exhaustion.
The following bugs have been fixed:
-
Qt: Endpoints dialog - unexpected byte unit suffixes in packet columns. Issue 18229.
-
GOOSE: field "floating_point" not working anymore. Issue 18491.
-
EVS Header-Full format padding issues. Issue 18498.
-
Wireshark 4.0.0 VOIP playback has no sound and can’t resume after pausing. Issue 18510.
-
Wireshark crashes when exporting a profile on Mac OSX if there is no extension. Issue 18525.
-
EVS dissector missing value description. Issue 18550.
-
Qt 6 font descriptions not backward compatible with Qt 5. Issue 18553.
-
Wireshark, wrong TCP ACKed unseen segment message. Issue 18558.
-
Invalid Cyrillic symbol in timezone at \"Arrival Time\" field in frame. Issue 18562.
-
ProtoBuf parse extension definitions failed. Issue 18599.
-
Fuzz job crash output: fuzz-2022-11-09-11134.pcap. Issue 18613.
-
Fuzz job crash output: fuzz-2022-11-14-11111.pcap. Issue 18632.
-
Wireshark is using old version of ASN (ETSI TS 125 453 V11.2.0) which is imapacting length of param in the messages. Issue 18646.
-
BGP: False IGMP flags value in EVPN routes (type 6,7,8) Issue 18660.
-
wslog assumes stderr and stdout exist. Issue 18684.
-
Editing packet comments, with non-ASCII characters, on Windows saves them in the local code page, not in UTF-8. Issue 18698.
-
Unable to decrypt PSK based DTLS traffic which uses Connection ID. Issue 18705.
-
HTTP2 tests fail when built without nghttp2. Issue 18707.
New and Updated Features
Removed Features and Support
New Protocol Support
There are no new protocols in this release.
Updated Protocol Support
ASN.1 PER, ASTERIX, BGP, BPv6, DTLS, EVS, GOOSE, GSM Osmux, IPv6, Kafka, Locamation IM, MONGO, NXP 802.15.4, OpenFlow v6, PCAP, Protobuf, RTP, S1AP, SKINNY, TCP, and WASSP
New and Updated Capture File Support
There is no new or updated capture file support in this release.
New File Format Decoding Support
There is no new or updated file format support in this release.
Getting Wireshark
Wireshark source code and installation packages are available from https://www.wireshark.org/download.html.
Vendor-supplied Packages
Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site.
File Locations
Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
These locations vary from platform to platform.
You can use or tshark -G folders to find the default locations on your system.
Getting Help
The User’s Guide, manual pages and various other documentation can be found at https://www.wireshark.org/docs/
Community support is available on Wireshark’s Q&A site and on the wireshark-users mailing list. Subscription information and archives for all of Wireshark’s mailing lists can be found on the web site.
Bugs and feature requests can be reported on the issue tracker.
You can learn protocol analysis and meet Wireshark’s developers at SharkFest.
Frequently Asked Questions
A complete FAQ is available on the Wireshark web site.