Wireshark captures and inspects network packets in real time — the standard tool for network troubleshooting, analysis and education.
| 1 | Windows 10+ / macOS / Linux |
|---|---|
| 2 | Npcap driver on Windows |
| 3 | Admin rights for capture |
| • | Version 4.4 · Size ~90 MB |
Get it from wireshark.org/download.html (~90 MB) — on Windows make sure to check the Npcap driver option.
Run as administrator, verify Npcap installed, and for wireless enable monitor mode if your adapter supports it.
Type http.request in the filter bar; other useful filters: ip.addr==1.2.3.4, tcp.port==443, dns.
Not without keys — export SSLKEYLOGFILE from your browser and set it in Wireshark's TLS preferences; your sessions only.
Capturing your own network is legal; sniffing others' traffic without authorization is not. Practice on your home network.
Wireshark sees all protocols at the NIC level; Fiddler is an HTTP proxy that's handier for editing web requests.
| tcpdump | CLI packet capture |
|---|---|
| tshark | Wireshark CLI |
| Fiddler | HTTP-focused proxy |
| Charles Proxy | HTTP debugging |
License: Free · open source (GPL)
All software names and trademarks belong to their respective owners. This site only provides official download guidance and does not host any installers.