We use Wireshark to check the network traffic, and if there's any network problem or issue, we can check it through the tool. We also use Wireshark during analysis, to check if there's any network connectivity or attempts from the malware to communicate with the C&C server. We use the tool for further analysis and investigation.
Service Security Lead at Salam Technology
Useful, allows you to deeply understand what's going on at the packet level, and helps you analyze adverse signatures
Pros and Cons
- "I find Wireshark a very useful tool. Its best feature is that it allows me to deeply understand what's going on at the packet level, as well as any adverse signatures that I can analyze. When I need to create an IPS rule, I need to check the traffic deeply to get more insights about the actual traffic, what's the name of certain flags, etc., and I'm able to do all that through Wireshark. The tool is also user-friendly."
- "A room for improvement in Wireshark is its ease of use for beginners. It could be better. Another room for improvement in the tool is for it to provide more details about the traffic load. At the moment, Wireshark is adequate for me, so there isn't anything I'd like added to it in its next version."
What is our primary use case?
What is most valuable?
I find Wireshark a very useful tool. Its best feature is that it allows me to deeply understand what's going on at the packet level, as well as any adverse signatures that I can analyze. When I need to create an IPS rule, I need to check the traffic deeply to get more insights about the actual traffic, what's the name of certain flags, etc., and I'm able to do all that through Wireshark.
The tool is also user-friendly.
What needs improvement?
A room for improvement in Wireshark is its ease of use for beginners. It could be better. Another room for improvement in the tool is for it to provide more details about the traffic load.
At the moment, Wireshark is adequate for me, so there isn't anything I'd like added to it in its next version.
For how long have I used the solution?
I've been using Wireshark for a long time, so I can't remember the exact number of years I've been using it.
Buyer's Guide
Wireshark
February 2025

Learn what your peers think about Wireshark. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.
What do I think about the stability of the solution?
Wireshark is a stable tool. I didn't see any issues with its stability.
What do I think about the scalability of the solution?
Wireshark is a scalable tool.
How are customer service and support?
We never raised an issue or ticket with the Wireshark technical support team.
How was the initial setup?
The setup process for Wireshark was very simple.
What's my experience with pricing, setup cost, and licensing?
We're using the free version of Wireshark.
Which other solutions did I evaluate?
We didn't try to use other solutions apart from Wireshark.
What other advice do I have?
Two hundred people use Wireshark within the company.
My rating for Wireshark is a nine out of ten because I like it and I use it so much.
I'm only a user of Wireshark.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.

Network Engineer at a tech company with 10,001+ employees
It is free to download and install, and it runs on multiple platforms
Pros and Cons
- "It gives us the ability to pinpoint problems and to communicate network problems with software and hardware vendors."
- "Big trace files (more than 1,000,000 packets) can be slow, but then you can use "TraceWrangler" (also free) to help with slicing and dicing the data."
- "It is not an easy program. You will need to study to use it to its full capabilities (follow a course)."
What is our primary use case?
Wireshark can be used to troubleshoot network issues, but also to baseline applications. When you know what an app does when there is no issue at hand, you will be better able to spot the problem when there is an issue. Everything that happens on the network can be analysed with Wireshark. However, the tool is as good as the person using it. You need TCP/IP knowledge to be able to use a tool like this. The more you know about packets on the wire, the better you can use this tool.
How has it helped my organization?
It gives us the ability to pinpoint problems and to communicate network problems with software and hardware vendors. The packets never lie!
What is most valuable?
Making different profiles to tune the tool for the problems at hand, the graphing options, to customize the screen layout, etc.
Also, shines for wireless troubleshooting, but most hardware does not give full insight in WiFi communication (beacon frames, etc.).
What needs improvement?
Big trace files (more than 1,000,000 packets) can be slow, but then you can use "TraceWrangler" (also free) to help with slicing and dicing the data.
This is no complaint, but is not an easy program. You will need to study to use it to its full capabilities (follow a course), but the more you know about it, the more you will use it.
For how long have I used the solution?
More than five years.
What do I think about the stability of the solution?
No issues.
What do I think about the scalability of the solution?
Big trace files need to be chopped for analysis.
How are customer service and technical support?
My bug reports were in the next release, therefore a great experience.
Which solution did I use previously and why did I switch?
I have used it more or less since 2001. So no, I did not use a previous solution.
How was the initial setup?
Download, run setup, enter;enter;enter..., it is ready.
What about the implementation team?
In-house.
What's my experience with pricing, setup cost, and licensing?
It is free to download and install. It runs on multiple platforms, so how can you go wrong?
Which other solutions did I evaluate?
In those days, there was a tool "Sniffer", but it was too expensive.
What other advice do I have?
If you profile yourself as a network specialist, and don't use it, I would not trust you on my network.
It is even referenced in the book "TCP/IP Illustrated, Vol. 1", the TCP/IP bible!
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Wireshark
February 2025

Learn what your peers think about Wireshark. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.
Software Engeener at Mbition
Adaptive, open-source tool for network-related developers
Pros and Cons
- "Wireshark's best feature is that it's adaptive, which means it's the go-to tool for network-related developers."
- "Wireshark's UI isn't easy to handle and doesn't have as nice a view as Omnipeek."
What is our primary use case?
I use Wireshark to analyze packets, especially network packets.
What is most valuable?
Wireshark's best feature is that it's adaptive, which means it's the go-to tool for network-related developers, as when the new protocol comes up, it's rapidly applied to the system, so I can just look into the packet. For example, I'm working in the automotive industry, and Wireshark supports some IP protocols, which not many tools do.
What needs improvement?
Wireshark's UI isn't easy to handle and doesn't have as nice a view as Omnipeek.
For how long have I used the solution?
I've been using Wireshark for over twelve years.
What do I think about the stability of the solution?
Wireshark is stable. When it changed its UI from a legacy one to the acute, there were some crashes, but that was a while ago, and now it's pretty much stable.
What do I think about the scalability of the solution?
Wireshark provides some macro functions and a custom parse protocol for the new protocols, so it's quite scalable.
How are customer service and support?
As it's open-source, Wireshark's customer service isn't as sophisticated as private products. Developers are welcome to contribute their help, but if no one is interested in your particular issue, there's likely no mode to come up with a solution.
How was the initial setup?
The initial setup was straightforward and only took a couple of minutes to complete.
What's my experience with pricing, setup cost, and licensing?
We use the free, open-source version of Wireshark.
What other advice do I have?
The most important thing for new users of Wireshark is to get used to the filtering functions because all the filters are based on command input, so the ability to organize the right filter is essential. I would rate Wireshark eight out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Incident manager at Cisco
User-friendly with an easy setup and a nice interface
Pros and Cons
- "The options that are required to get the details for the packet drops are good."
- "You need good network connectivity to download during the setup, otherwise, it might take a while."
What is our primary use case?
It's a tool that we use to capture the network and if there is any lag or if there are packet drops.
It's a very useful tool. We are using it to monitor any network depreciation. For example, suppose there's a call going on between two IP phones and one person says that I cannot hear you. There's definitely something wrong. The RTP is getting dropped, and the packets are getting dropped. We need to capture the live call or if there are any prerecord calls for this particular time period. We go ahead and use this tool to find out whether the packets dropped when a packet is dropped and what caused the audio issue or video issue. We actually use it to understand any network issues.
What is most valuable?
I've been using it for quite some time, and I find that it's very user-friendly. The interface is good.
The options that are required to get the details for the packet drops are good. All the options are available for whatever is required. I can choose any of them and search easily, and I can also pull the report and publish it to the team or whoever requires it.
It's easy to set up.
What needs improvement?
I can't suggest anything as of now regarding Wireshark. I have never found any issues or had any difficulty using it. Be it connecting the system to the network directly and capturing the data through Wireshark, or for a specific time, it's been flawless. I have got the results every time I've needed them.
You need good network connectivity to download during the setup, otherwise, it might take a while.
For how long have I used the solution?
I have been using Wireshark for almost six years. I've used it for a while at this point.
What do I think about the stability of the solution?
The solution is stable. It's reliable. It offers good performance There are no bugs or glitches. It doesn't crash or freeze.
What do I think about the scalability of the solution?
Almost everybody in our company is using the product. That's likely around 1,000 people. Here, we always work on the network devices, and we need to use this tool to understand if there is any issue with that network or if there is any issue with the calls. Therefore, almost everyone uses it within the network team.
In terms of scalability, if you look at it, there's no limit. There's no restriction on how many users can use it. However, it depends on the organization. If you need any approval to download it usually needs special permission.
How are customer service and support?
I never had to reach out to technical support regarding Wireshark. Whenever I've had to use it, it worked properly and there was no issue to complain about.
How was the initial setup?
It is easy to set up. We just need to download it and choose the options while setting it up. That's it. After that, it should be done.
The download itself doesn't take a lot of time. It depends on the bandwidth of your network. If you're using a good network connection, then it hardly takes a minute to download.
What's my experience with pricing, setup cost, and licensing?
It is open-source. Anyone can download and use it.
What other advice do I have?
I use the solution to support my customer's environment. I am not a partner or reseller.
I'd rate the solution ten out of ten.
Wireshark is more of a packet capture tool. If you are in a network environment, where you are supporting the customer and looking after the issues with network drop, network devices, or IP calls, you must have a Wireshark on your PC. This is a tool that gives you a clear-cut idea about where the issue is, and where the packs are dropping. It's an excellent tool. Everyone should start using it.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Cyber Security and IT Head at a outsourcing company with 51-200 employees
A free and open-source packet analyzer with a useful filtering and coloring feature
Pros and Cons
- "I like the filtering feature as we can filter data easily. This feature is also available in tcpdump, but it's a simple piece of software. Wireshark is more advanced and has many features. It allows you to filter a lot of things. The output can be filtered easily. The most important feature is colorization. If I say, "Okay, this particular SMB protocol in red, it will show me red." It's easy to identify that protocol or capture data."
- "It would be better if they offered a hybrid version like My Cloud Control."
What is our primary use case?
I use Wireshark for DT inspection of several protocols and choose different color patterns to make it easy to see the various protocols. It also involves live analysis because I can see the live analysis on the Internet. The main task of Wireshark is to inspect the throttle and live data, and it's doing them.
What is most valuable?
I like the filtering feature as we can filter data easily. This feature is also available in tcpdump, but it's a simple piece of software. Wireshark is more advanced and has many features. It allows you to filter a lot of things. The output can be filtered easily.
The most important feature is colorization. If I say, "Okay, this particular SMB protocol in red, it will show me red." It's easy to identify that protocol or capture data.
What needs improvement?
It would be better if they offered a hybrid version like My Cloud Control.
For how long have I used the solution?
I have been working with Wireshark for about five years.
What do I think about the stability of the solution?
Wireshark is a stable solution.
What do I think about the scalability of the solution?
Wireshark is a scalable solution. Almost all protocols are covered by Wireshark.
How are customer service and support?
I have never contacted technical support. If I have an issue with some functionality or operation, I use Wireshark's community support or Google the information I need.
Which solution did I use previously and why did I switch?
I was working with Nmap and Cisco Analyzer, but then I started working with Wireshark. Before that, I used another packet analyzer called tcpdump, which is similar to Wireshark.
How was the initial setup?
The initial setup is straightforward. I just downloaded the software and installed it. I completed the whole process within two minutes. It's very simple.
What about the implementation team?
I implemented this solution.
What's my experience with pricing, setup cost, and licensing?
I am using the free version of this solution.
What other advice do I have?
It's a user-friendly solution. I can start by capturing the interface's data because it will show me the number of interferences. Then I have to select and begin the inspection.
On a scale from one to ten, I would give Wireshark an eight.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Systems Administrator at a tech services company with 51-200 employees
Optimizing network inspection through effective packet capturing with a simple setup
Pros and Cons
- "Wireshark saves a lot of time, especially with network troubleshooting."
- "The speed of the Internet could be improved, especially its performance."
What is our primary use case?
We are using Wireshark for inspecting the vertical line to know the data flow in and out of the cables. This is to determine if there is real traffic flow through the physical connections or not.
Additionally, we use Wireshark for physical inspection on the data line.
How has it helped my organization?
Wireshark saves a lot of time, especially with network troubleshooting.
What is most valuable?
The features I find most effective in Wireshark include the current speed monitoring, data flow inspection, PPPoE clients, and inspecting our advanced switches and routers.
Packet capturing capabilities are what I'm currently using the most.
What needs improvement?
The speed of the Internet could be improved, especially its performance. Performance can sometimes be a challenge due to numerous factors.
For how long have I used the solution?
I have been working with Wireshark for more than five years.
What do I think about the stability of the solution?
I would rate the stability of Wireshark as nine out of ten.
What do I think about the scalability of the solution?
Wireshark is quite scalable, and I would also rate its scalability at nine out of ten.
How was the initial setup?
The initial setup of Wireshark is simple for new users. However, there are complex features that require expertise to understand. The interface is easy, and everything is well-arranged, allowing users to find functionalities easily from the options tab.
What's my experience with pricing, setup cost, and licensing?
Wireshark is priced at a medium range, not too high, not too low. The pricing could be more flexible, and they might make it more expensive. That said, compared to other products, it is competitive.
Which other solutions did I evaluate?
I have heard from colleagues that other solutions do not provide exact results. Comparatively, Wireshark is better and more popular.
What other advice do I have?
I recommend Wireshark to users of both small and enterprise-level companies. It is effective for the minimum business and large enterprise scales.
I'd rate the solution ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Last updated: Oct 27, 2024
Flag as inappropriateFounder & CEO at ITGAT
A comprehensive troubleshooting tool, with excellent deep-packet inspection functionality
Pros and Cons
- "The strongest feature of this solution, is the ability it gives us to carry out deep-packet inspections on our network, particularly when a function isn't performing as it should."
- "We would like the product to be developed so that it doesn't rely on internet access for installation. We would like to see all of the components required to be integrated into the installer."
What is our primary use case?
We use this solution for troubleshooting network issues.
What is most valuable?
The strongest feature of this solution, is the ability it gives us to carry out deep-packet inspections on our network, particularly when a function isn't performing as it should.
What needs improvement?
We would like the product to be developed so that it doesn't rely on internet access for installation. We would like to see all of the components required to be integrated into the installer.
For how long have I used the solution?
We have been working with this solution for around three years.
What do I think about the stability of the solution?
This is a very stable product.
What do I think about the scalability of the solution?
We have found this solution to be scalable across all operating systems.
How was the initial setup?
The initial setup of this solution is very simple.
What's my experience with pricing, setup cost, and licensing?
We are using a freeware version of this solution, so there are no licence costs involved.
What other advice do I have?
We would rate this solution a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Free solution with a large online community, which makes it simple to troubleshoot problems
Pros and Cons
- "It's easy to troubleshoot issues because there's a large online community."
- "DNS could be improved."
What is our primary use case?
This solution is deployed on-premises.
What is most valuable?
Wireshark provides many different functions which are very useful for my job. There are a lot of features, and I still haven't used everything yet. It's easy to troubleshoot issues because there's a large online community.
What needs improvement?
DNS could be improved.
For how long have I used the solution?
I have been using this solution for 10 years.
What do I think about the scalability of the solution?
The scalability is pretty good. If I have a big file, I can always divide it into smaller ones. I haven't had any problems with opening big files.
How are customer service and support?
There's a big community of people on the internet involved in Wireshark. There are a lot of free resources on Wireshark. If I ever need anything, I just search on YouTube, and there are people that are analyzing or troubleshooting a particular issue with DNS or with retransmission, etc.
How was the initial setup?
Setup is very easy. It's simple to install it on your PC.
We have a software team that automatically installs the solution on our PC, and a variety of my colleagues use it for troubleshooting. There are multiple teams involved.
What about the implementation team?
Deployment was done in-house.
What's my experience with pricing, setup cost, and licensing?
Wireshark is free software, so you don't have to pay any licensing fee. Individual people can use it and then donate to Wireshark.
What other advice do I have?
I would rate this solution 10 out of 10.
Wireshark is very good for network engineers. It's free software, and you can install it very easily, and there are a lot of features. I mainly use Wireshark in Windows. My advice is to do research on the internet, especially on YouTube, if you have any troubleshooting issues.
It's a very popular solution, and if you're able to, I think it would be helpful to donate to the organization so people can continue to develop Wireshark.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.

Buyer's Guide
Download our free Wireshark Report and get advice and tips from experienced pros
sharing their opinions.
Updated: February 2025
Product Categories
Network TroubleshootingPopular Comparisons
Auvik Network Management (ANM)
AirMagnet Survey
DX Spectrum
NetAlly EtherScope nXG
LinkSprinter
Observer GigaStor
ManageEngine NetFlow Analyzer
Broadcom Network Flow Analysis
Colasoft Capsa
Buyer's Guide
Download our free Wireshark Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Would you recommend implementing Wireshark for network troubleshooting?
- When evaluating Network Troubleshooting, what aspect do you think is the most important to look for?
- Cisco Catalyst Switch 3560 is not working - looking for advice
- Why is Network Troubleshooting important for companies?
- How has the Facebook outage (October 2021) happened? Could it have been prevented?