Wireshark Overview
Wireshark is the free, open-source (GPL) network protocol analyzer used to capture and inspect traffic on a network in fine detail. It decodes hundreds of protocols, lets you filter and follow individual conversations, and presents packets with a layered view from the link layer up to application data, which makes it a core tool for network troubleshooting, security analysis, and protocol development. Color rules, capture-time filtering, and statistics views such as I/O graphs and conversation lists help make sense of busy captures. It can capture live from interfaces (using Npcap on Windows) or open saved capture files in formats like pcap and pcapng. The offline installer is the full setup, bundling the capture driver, and installs without a network connection. This page links to Wireshark's official Wireshark download.