Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP and WPA/WPA2.

Real-time data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, token ring, frame relay, FDDI, etc.

Capture files compressed with gzip can be decompressed on the fly.Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, etc.The most powerful display filter in the industry.The captured network data can be browsed through the GUI or through the TTY mode TShark utility.Multi-platform: runs on Windows, Linux, macOS, Solaris, FreeBSD, NetBSD and many other platforms.In-depth inspection of hundreds of protocols, and more protocols are being added all the time.

Wireshark windows vista