Network Protocol Analyzer Wireshark 3.6 released
Wireshark 3.6 is the latest version of the network protocol analyzer. The program is available for Windows, Mac and Linux operating systems, and the latest version introduces a large number of improvements, including support for a wide range of new protocols.
Wireshark may be used to capture and analyze network traffic; it is often used by network administrators and security researchers to inspect the behavior of certain applications or services.
Our first mentioning of Wireshark dates back to 2009.
Wireshark 3.6
Interested users find downloads of Wireshark 3.6 on the official project website. Applications are provided for Windows (portable and installer), and Mac OS. The source code is also listed on the download page.
Windows packages include the latest stable release version of Npcap, which Wireshark requires for live packet capturing. A 64-bit portable version of Wireshark for Windows is now provided. Note that a packet capture driver needs to be installed manually if the portable version of Wireshark is used.
The changelog lists all changes of the new Wireshark 3.6 release. You may consult it for a full rundown on what is new and changed.
Below is a short list of the most important changes in the new version:
- New 64-bit portable version for Windows.
- The Windows installer comes with Npcap 1.55.
- Wireshark supports Event Tracing for Windows.
- "A new extcap named ETW reader is created that now can open an etl file, convert all events in the file to DLT_ETW packets and write to a specified FIFO destination."
- Support for Mac OS ARM 64, with a package now provided.
- The Mac version requires Mac OS 10.13 or newer. It includes Qt 5.15.3.
- Display filter set elements must be separated with commas.
- Literal strings may be specified using raw string syntax.
- RTP Player has been improved. It can now play several streams in a row, has a playlist, which supports adding and removing streams, stream muting, has a more responsive UI, and is now found under Telephony > RTP > RTP Player.
- VoIP dialogs are now non-modal and may stay open in the background.
- IP fragments between public IPv4 addresses are now reassembled even if they have different VLAN IDs.
- TShark can export TLS session keys.
- User guide has been updated.
- Support for many new protocols, e.g. 5G Lawful Interception (5GLI), Bluetooth Link Manager Protocol (BT LMP), Bundle Protocol version 7 (BPv7).
Now You: do you use tools such as Wireshark?
Martin,
Just awesome! I am so happy that my aggravation over “connection not secure” has stopped.
Thank you so much.
Sam in Minnesota, USA
Would be nice if you mentioned it was free. Almost every vendor offers “download for free” for crippled or timed versions, so it’s nice to recognize products that are completely free.
Here’s an increasingly rare example of a good program (not app!) where the focus is on useful functionality and improvement, not taking away features and not reinventing the UI. What browsers used to be for a while in the mid/late-2000s.