It decodes hundreds of protocols and lets users filter packets, follow streams, and view timing. Captures can be saved and shared for later analysis. It runs on Windows, macOS, and Linux.
It is free and open source. The interface can feel dense, but it is a standard skill for network and security staff.
tcpdump is a command-line option. Wireshark suits cybersecurity analysts and network engineers.
// alternatives to Wireshark see all →
// related tools in Cybersecurity
Autopsy
Open-source digital forensics platform
Burp Suite
Web application security testing toolkit
Metasploit
Penetration testing framework with a large library of exploits
Nmap
Open-source network scanner for host and service discovery
Recorded Future
Threat intelligence platform for security teams
Tenable
Vulnerability management and exposure assessment platform