Wireshark function introduction:
Deep inspection of hundreds of protocols over time.
Live capture and offline analysis.
The standard three-pane view mode includes browser compatibility.
Multi-platform support: Runs on Windows, Linux, Mac OS X, Solaris, FreeBSD, NetBSD and other platforms.
Captured network data can be viewed through a graphical user interface, or through the TTY mode tshark utility.
The most powerful display filter in the industry.
Rich VoIP analytics.
Read/write many different capture file formats.
Use gzip compression to compress and encrypt real-time captured data.
You can get Wireshark data in real time.
Encrypted files are supported for many protocols, including IPSec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP and WPA/WPA2.
Can be applied to packet lists for quick, intuitive analysis.
Output can be exported to XML, PostScript, CSV or plain text files.
Useful
Useful
Useful