Wireshark Reviews

I use Wireshark for DT inspection of several protocols and choose different color patterns to make it easy to see the various protocols. It also involves live analysis because I can see the live analysis on the Internet. The main task of Wireshark is to inspect the throttle and live data, and it's doing them.

I like the filtering feature as we can filter data easily. This feature is also available in tcpdump, but it's a simple piece of software. Wireshark is more advanced and has many features. It allows you to filter a lot of things. The output can be filtered easily.

The most important feature is colorization. If I say, "Okay, this particular SMB protocol in red, it will show me red." It's easy to identify that protocol or capture data. 

It would be better if they offered a hybrid version like My Cloud Control.

I have been working with Wireshark for about five years.

Wireshark is a stable solution.

Wireshark is a scalable solution. Almost all protocols are covered by Wireshark. 

I have never contacted technical support. If I have an issue with some functionality or operation, I use Wireshark's community support or Google the information I need.

I was working with Nmap and Cisco Analyzer, but then I started working with Wireshark. Before that, I used another packet analyzer called tcpdump, which is similar to Wireshark.

The initial setup is straightforward. I just downloaded the software and installed it. I completed the whole process within two minutes. It's very simple.

I implemented this solution. 

I am using the free version of this solution.

It's a user-friendly solution. I can start by capturing the interface's data because it will show me the number of interferences. Then I have to select and begin the inspection.

On a scale from one to ten, I would give Wireshark an eight.

We primarily use Wireshark for troubleshooting critical issues in our network, retrieving packet headers using packet capture, and for creating custom apps. There are six people on our team and we all use Wireshark on our devices. 

When we are stuck with an issue that requires deep packet inspection, we capture the traffic with Wireshark, which allows us to resolve it.  

The ability to decrypt traffic and the abundance of filters available are both valuable features.

The solution has a steep learning curve. There are so many filters and features that are frequently being updated, it takes research, experience and familiarity to be able to use them. It could be a lot more user-friendly. 

I have been using this solution for six years.

I think Wireshark is the most stable product of its kind.

The solution is very scalable, you can capture traffic on any device regardless of your vendor. 

We have never needed to use customer service or technical support. Whenever we have an issue, a Google search provides us everything we need through community support including Wireshark tutorials.  

The setup of the product is very simple. It's freeware, just download the .exe, go through the installation and select the desired interface you want to capture traffic on. It's a simple and very straightforward process. 

Wireshark is free software, so you can download it and use it for free with no licensing fees.  

I would rate this solution a nine out of ten. Wireshark has been getting better and better in the time I've been using it and it is a very helpful tool. 

This solution is deployed on-premises.

Wireshark provides many different functions which are very useful for my job. There are a lot of features, and I still haven't used everything yet. It's easy to troubleshoot issues because there's a large online community.

DNS could be improved.

I have been using this solution for 10 years.

The scalability is pretty good. If I have a big file, I can always divide it into smaller ones. I haven't had any problems with opening big files.

There's a big community of people on the internet involved in Wireshark. There are a lot of free resources on Wireshark. If I ever need anything, I just search on YouTube, and there are people that are analyzing or troubleshooting a particular issue with DNS or with retransmission, etc.

Setup is very easy. It's simple to install it on your PC.

We have a software team that automatically installs the solution on our PC, and a variety of my colleagues use it for troubleshooting. There are multiple teams involved.

Deployment was done in-house.

Wireshark is free software, so you don't have to pay any licensing fee. Individual people can use it and then donate to Wireshark.

I would rate this solution 10 out of 10. 

Wireshark is very good for network engineers. It's free software, and you can install it very easily, and there are a lot of features. I mainly use Wireshark in Windows. My advice is to do research on the internet, especially on YouTube, if you have any troubleshooting issues.

It's a very popular solution, and if you're able to, I think it would be helpful to donate to the organization so people can continue to develop Wireshark.

There are multiple use cases for Wireshark. One of the primary use cases is capturing the customer's network traffic. When an issue occurs on the customer's network, we take packet captures to analyze and decode the streams that were active during the time of the incident. 

Additionally, we use Wireshark to replay packet streams. This helps us troubleshoot issues that may not be readily observable on the live network. With the packet capture in hand, we can analyze the decoded packets and identify the protocols involved and the specific nature of the issue that occurred.

It has helped us in debugging challenging customer issues

The best part about Wireshark, in my opinion, is its ability to analyze packet capture files. It lists out various protocols like TCP, UDP, or SCTP, along with source and destination codes. This feature is truly amazing.

One thing that I feel is currently missing in Wireshark is the ability to perform deep analytics on traffic streams after they have been decoded. While it may not be the major use case right now, it would be beneficial to have some sort of leveraging of artificial intelligence or machine learning to automatically detect threats or vulnerabilities based on specific types of network traffic. Predictive analysis of this nature is currently absent in Wireshark.

So in future releases, it would be great to see more robust analytics for traffic streams in the next version of Wireshark.

One improvement I would suggest is having more graphical representations of network topologies in Wireshark. Currently, when we deploy Wireshark to collect streams, we lack visibility into how different entities are connected at that specific time. Having a network topology view of connected devices, showing the source and destination, would be really beneficial. For example, in DNS troubleshooting, visualizing the network path can help recreate certain issues. Unfortunately, this feature is not currently available in Wireshark.

I've been working with Wireshark for more than 13 years. I would consider myself a network software development professional with extensive experience.

I've worked with major companies like Cisco Systems and other networking companies.

I would rate the stability of Wireshark as nine out of ten. It's quite stable.

In terms of scalability, I would rate the scalability a seven out of ten. It is difficult to scale this solution. 

The use cases I've worked on require deploying Wireshark independently on each node. However, if I want to deploy Wireshark on hundreds of devices and collect information at a single location for better network management, that capability is currently not available. We need Wireshark to run on all the devices and have one device act as a controller to collect and process the information.

Wireshark is popular among both individual users and enterprise organizations, but currently, it is mostly used individually for debugging network traffic.

I usually troubleshoot issues on my own. However, since Wireshark is open source, there is a community support system available.

Positive

Deployment-wise, Wireshark is relatively simple. It's not overly complex, and it works quite well. So, in that respect, it's a good solution.

We are working with a hybrid model. We deploy Wireshark in both cloud platforms and on-premises. Depending on the real devices and entities, we sometimes deploy it onto virtual machines in the cloud and collect and process information using a switch. This flexible deployment approach allows us to cater to different scenarios and adapt accordingly.

I can compare Wireshark with tools like Suricata and Zeek. Suricata and Zeek are both implemented considering setting objectives, meaning that they are designed to achieve specific goals. For example, Suricata is designed to decode packet streams, perform analysis, and push configuration changes to devices. This makes it a good choice for an Intrusion Prevention System (IPS), which is a system that can detect and prevent attacks.

Wireshark is the base of Suricata. Suricata both use the same packet filter implementation, known as BPF (Berkley Packet Filter). BPF is a powerful tool that can be used to capture and analyze network traffic.

In general, I'm quite fond of Wireshark, so I would rate it an eight out of ten.

Wireshark is a tool for ARP scanning. I started using Wireshark back when I had a YouTube channel. It was mostly a security channel to show people how easily you can get hacked and how to hack. I was doing some research for my videos. I didn't know much about security, but I was interested in it, and Wireshark was one of the software solutions that kept popping up.

I watched some videos on how to use it and incorporated that into some of my videos. When I discovered something funny on my network a couple of years later, I decided to reinstall Wireshark to run some scans and found the culprit.

 It's all on-premises. Here in South Africa, a couple of companies have migrated to the cloud, but that's quite expensive for many of them. It's much easier and cheaper to buy a server and host everything locally. The only thing they keep in the cloud is email because on-premise email is just horrible. Most of my clients are on-premises. One or two has Azure or something like that.

Wireshark has a lot of features. It's a powerful tool if you're familiar with it. You can see everything on the network with it.

The average person would probably find Wireshark hard to use. When I first installed it, I was overwhelmed by all the data it was shooting out. It doesn't make sense until you start doing some research and figure out what everything means. It isn't the most user-friendly tool. It just provides so much information. 

I'm probably not familiar with it enough to say what features it's missing, but it could be a bit more accessible to the average system administrator having issues on their network so they can pull it out and run some scans.

I rate Wireshark eight out of 10 for stability.

I probably won't be able to give good input on this, but I will give Wireshark eight out of 10 for scalability based on the limited time that I've used it.

I also use MikroTik. It's easy because I've been working with it for years, so it's hard for me to compare it with Wireshark, which I only learned to make my YouTube videos and used a couple of times in the past. 

I'd say Wireshark and Nmap are more advanced and in-depth than using MikroTik by itself, but I haven't encountered a problem I couldn't resolve without using Wireshark. The exception is when a client doesn't have MikroTik, and they use a plain router or something like that. Obviously, I would need to pull out the other tools. MikroTik does what I need it to do. 

Wireshark uses a simple "next, next, finish" installer. Any person who can read can install it.

I rate Wireshark eight out of 10. It has much more network functionality than MikroTik, but the downside is a person has to learn it to use it correctly. Maybe make it my New Year's resolution to watch a tutorial on how to use it and start using it more in the new year.

Our primary use case for the solution is to see the over-the-air packets, the data transmission, and the wifi connection.

The transmission and reception issues are valuable. For example, while debugging through food issues, we can draw the graph of the data captured in the solution and see how the throughput is moving.

The solution can be improved by increasing its capacity to manage larger files. Wireshark gets stuck when it is a larger file.

We have been using the solution for approximately eight years.

The solution is stable.

The solution is scalable.

We have not had experience with customer service and support.

The initial setup is straightforward. 

I rate the solution a nine out of ten. The solution is good, but the solution can be improved by increasing its capacity to manage larger files. I advise users considering the solution to have the latest PC to load it. The newest voice is also required to load it otherwise it is difficult to open.

I use the solution to monitor our company network. It is installed on my PC and I pull data from our local server to conduct monitoring.

The solution is easy to install and use. 

I would like better control of bandwidth from the service provider. Some network failures are due to bandwidth so I would like to be able to increase capacity at any time and ensure it holds at that level. 

I have been using the solution for four months. 

The solution is stable. 

The solution is scalable and its capabilities are broad. 

The solution is open source so does not offer technical support.

I utilize YouTube videos to learn and troubleshoot. 

The initial setup was easy and took about 15 minutes. 

I installed the solution on my PC.

Our company uses the open source version so it is free. In the future, we may purchase a license. 

The solution is a good tool for network troubleshooting or management and I rate it a ten out of ten. 

We primarily use the solution for reading packet captures. It's like a packet analyzer, packet capture. 

I'm just reading some packets and looking for interesting tracking. That's all.

The solution is open-source. 

It does have SolarWinds in it or is involved in SolarWinds in some way.

The search filtering is very good. 

It has good basic features. 

There's a lot of information available online. Even if I am looking for something special, I can find details about that aspect. 

It is well structured.

The initial setup is very easy.

I find the product to be quite stable. 

We can scale the solution. 

It works pretty well, and we haven't seen any areas that are lacking. 

We'd like to be able to extract the output into an Excel table.

I've used the solution for a couple of years. 

The solution performs well. It's stable. We haven't had issues with bugs or glitches. It doesn't crash or freeze. 

In the beginning, maybe seven or eight years ago, we did have some issues. However, that was a long time ago, and that was resolved. 

It's my understanding that the solution can scale. 

You can pay for a version that offers a support tier. However, I am using the basic, free, open-source version. There is no support tier. If you need information in relation to troubleshooting, everything you need is online. You can search the internet and find what you need. 

The solution is very simple and straightforward. It's pretty easy. I wouldn't classify it as complex or difficult. 

I'd rate it five out of five in terms of ease of setup.

The solution is open-source and free to use. That said, there is a paid tier with more features if a company needs a bit more. 

I'm a customer and end-user. 

I'd recommend the solution to others. It's a good product. 

I'd rate the solution ten out of ten. 

I mainly use Wireshark for knowledge purposes, debugging, and to view what's going on in the network.

Wireshark's best features are that it lets us see what traffic is in the network and what data should be encrypted.

Wireshark could be improved with a delay option when getting data automatically. It could also work faster.

I've been working with Wireshark for over five years.

Wireshark is stable.

Wireshark is easy to scale.

Previously, I used Microsoft Network Monitor but switched to Wireshark because it's open-source and richer in features.

The initial setup is pretty simple.

I implemented Wireshark myself.

Wireshark is open-source and free of charge.

Wireshark is a very nice product that's really easy to use from the start. I would rate it nine out of ten.

We use Wireshark as a tool for network troubleshooting when we need to verify something directly. It is not used every day.

As an example, FortiGate, Wireshark can also export, we can pick up a file, process it, and apply it. Some tools allow us to take, capture, define and export to Wireshark, so we are able to analyze in great detail.

The most valuable feature of Wireshark is the ability to choose a destination of flow that has not been working as expected, it looks for a label, and we put the label within.

I would like to see Wireshark improve the ease of application of the command. The command is very powerful, but not easy to apply.

For the next release, I would like to see the motion of the measurement of the terminal loss packet. The round-trip delay. Also, it would benefit from improving the capability to evolve in real-time.

I have been using Wireshark for ten years.

Wireshark has been stable when I have had to use it.

The initial setup of Wireshark is not straightforward.

The version of Wireshark we use is free. 

Wireshark is a very useful tool. I would rate the solution an eight out of ten.