Wireshark 1.10 was the last release branch to officially support Windows XP. See the Wireshark release lifecycle page for more details. MacOS Wireshark supports macOS 10.12 and later. Wireshark is the world’s foremost and widely-used network protocol analyzer. It lets you see what’s happening on your network at a microscopic level and is the de facto (and often de jure) standard across many commercial and non-profit enterprises, government agencies, and educational institutions.
Npcap and WinPcap are Windows versions of the libpcap library. One of them must be installed in order to capture live network traffic on Windows.
The Wireshark installer from 3.0 onwards includes Npcap, where versions before include WinPcap. Even with the older Wireshark versions Npcap might work better for you, especially if you run Windows 10.
See CaptureSetup/CapturePrivileges for information about using Npcap and WinPcap with Wireshark.
The libpcap/WinPcap file format description can be found at: Development/LibpcapFileFormat
Npcap Versions
Since Npcap is just getting its first widespread exposure to the world unexpected issues may arise. Please use an updated version when possible.
See the 'Add or Remove Programs' list of the 'Control Panel' for the installed version.
WinPcap Versions
We strongly recommend that you use version 4.1.3 or 3.1. Some annoying bugs are fixed in these versions!
Wireshark 1.12 Download
See the 'Add or Remove Programs' list of the 'Control Panel' for the installed version.
Latest Stable Release: 4.1.3
The current and last WinPcap release version is 4.1.3. The 4.1.x versions contain the following improvements:
- Support for Windows XP, Vista, 2008, Windows 7, 2008R2 64 bit, Windows 8 and Server 2012
- Allows remote capture to work with Wireshark
- Based on libpcap 1.0
WinPcap 4.x does not support Windows 3.1, 95, 98, or ME.
Previous Stable Release: 3.1
This version contains substantial bug fixes and extensions above the 3.0 release:
- based on libpcap 0.9.3, with many fixes and extensions above the older version
- dial-up connections (e.g. PPP) can be captured on Windows 2000, Windows XP, and Windows Server 2003, as well as Windows 95, Windows 98, and Windows Me, which were supported by previous releases
- 'can't get a list of interfaces' error fixed
See the change log for WinPcap for a more complete list (although some of those bugs might be bugs in older 3.1 betas rather than in 3.0).
Installation
The Wireshark installer will copy the WinPcap installer and call it, so you get installation done 'all in one place'. This is the same WinPcap installer that you can get from WinPcap's download page.
However, you might need to install WinPcap by the standalone installer, if you want to try the latest alpha/beta, or there might even be a new WinPcap release version available.
The User's Guide Installing Wireshark under Windows page will also describe how to install WinPcap.
Windows Versions
You'll find complete information about this topic at WinPcap FAQ #14.
Download Wireshark
The current stable release of Wireshark is 3.4.1. It supersedes all previous releases.
- Windows Installer (64-bit)
- Windows Installer (32-bit)
- Windows PortableApps® (32-bit)
- macOS Intel 64-bit .dmg • Big Sur users should use 3.4.0
- Source Code
- Windows Installer (64-bit)
- Windows Installer (32-bit)
- Windows PortableApps® (32-bit)
- macOS Intel 64-bit .dmg
- Source Code
Older Releases
All present and past releases can be found in our download area.
Installation Notes
For a complete list of system requirements and supported platforms, please consult the User's Guide.
Information about each release can be found in the release notes.
Each Windows package comes with the latest stable release of Npcap, which is required for live packet capture. If needed you can download separately from the Npcap web site.
You can also capture packets using WinPcap, although it is no longer maintained or supported.
Live on the Bleeding Edge
You can download source code packages and Windows installers which are automatically created each time code is checked into the source code repository. These packages are available in the automated build section of our download area.
Go Spelunking
You can explore the download areas of the main site and mirrors below. Past releases can be found by browsing the all-versions directories under each platform directory.
Stay Current
You can stay informed about new Wireshark releases by subscribing to the wireshark-announce mailing list. We also provide a PAD file to make automated checking easier.
Verify Downloads
File hashes for the 3.4.1 release can be found in the signatures file. It is signed with key id 0xE6FEAEEA. Prior to April 2016 downloads were signed with key id 0x21F2949A.
Stay Legal
Wireshark is subject to U.S. export regulations. Take heed. Consult a lawyer if you have any questions.
I have a lot of traffic...
Wireshark 1.12
ANSWER: SteelCentral™ AppResponse 11
- • Full stack analysis – from packets to pages
- • Rich performance metrics & pre-defined insights for fast problem identification/resolution
- • Modular, flexible solution for deeply-analyzing network & application performance
Wireshark 1.10 For Windows Xp
Wireshark packages are available for most platforms, including the ones listed below.
Wireshark For Xp
| Vendor / Platform | Sources |
|---|---|
| Alpine / Alpine Linux | Standard package |
| Apple / macOS | Homebrew(Formula) MacPorts Fink |
| Arch Linux / Arch Linux | Standard package |
| Canonical / Ubuntu | Standard package Latest stable PPA |
| Debian / Debian GNU/Linux | Standard package |
| The FreeBSD Project / FreeBSD | Standard package |
| Gentoo Foundation / Gentoo Linux | Standard package |
| HP / HP-UX | Porting And Archive Centre for HP-UX |
| NetBSD Foundation / NetBSD | Standard package |
| NixOS / NixOS | Standard package |
| Novell / openSUSE, SUSE Linux | Standard package |
| Offensive Security / Kali Linux | Standard package |
| PCLinuxOS / PCLinuxOS | Standard package |
| Red Hat / Fedora | Standard package |
| Red Hat / Red Hat Enterprise Linux | Standard package |
| Slackware Linux / Slackware | SlackBuilds.org |
| Oracle / Solaris 11 | Standard package |
| * / * | The Written Word |