Wireshark is the world's foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto (and often de jure) standard across many industries and educational institutions.

Wireshark has a rich feature set which includes the following:
- Capture files compressed with gzip can be decompressed on the fly
- Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility
- Coloring rules can be applied to the packet list for quick, intuitive analysis
- Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2
- Deep inspection of hundreds of protocols, with more being added all the time
- Live capture and offline analysis
- Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platform)
- Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
- Output can be exported to XML, PostScript®, CSV, or plain text
- Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others
- Rich VoIP analysis
- Standard three-pane packet browser
- The most powerful display filters in the industry

fe6K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4N6A6M7X3g2K6K9r3q4J5K9#2)9J5k6h3!0J5k6H3`.`.

dc3K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4N6A6M7X3g2K6K9r3q4J5K9#2)9J5k6h3!0J5k6#2)9J5c8X3c8G2j5%4y4Q4x3V1k6J5k6h3I4F1L8%4c8W2M7#2)9J5c8Y4N6A6M7X3g2K6K9r3q4J5K9#2)9J5k6o6q4Q4x3X3f1^5i4K6u0W2x3#2)9J5k6h3S2@1L8h3H3`.

Setup:
f41K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4N6A6M7X3g2K6K9r3q4J5K9#2)9J5k6h3!0J5k6#2)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0r3N6$3W2F1x3K6u0Q4x3V1k6i4K9i4u0W2M7$3S2S2M7X3E0Q4x3X3c8%4K9h3^5K6x3W2)9J5k6o6q4Q4x3X3f1^5i4K6u0W2x3#2)9J5k6h3g2^5k6b7`.`.

Setup-x64:
556K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4N6A6M7X3g2K6K9r3q4J5K9#2)9J5k6h3!0J5k6#2)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0r3N6$3W2F1y4U0c8Q4x3V1k6i4K9i4u0W2M7$3S2S2M7X3E0Q4x3X3c8%4K9h3^5$3y4q4)9J5k6o6q4Q4x3X3f1^5i4K6u0W2x3#2)9J5k6h3g2^5k6b7`.`.

Portable Setup:
bc9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4N6A6M7X3g2K6K9r3q4J5K9#2)9J5k6h3!0J5k6#2)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0r3N6$3W2F1x3K6u0Q4x3V1k6i4K9i4u0W2M7$3S2S2M7X3E0b7L8%4u0@1j5h3u0D9k6g2)9J5k6o6q4Q4x3X3f1^5i4K6u0W2x3#2)9J5k6i4m8S2k6W2)9J5k6h3g2^5k6b7`.`.

U3:
442K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4N6A6M7X3g2K6K9r3q4J5K9#2)9J5k6h3!0J5k6#2)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0r3N6$3W2F1x3K6u0Q4x3V1k6i4K9i4u0W2M7$3S2S2M7X3E0Q4x3X3b7I4i4K6u0W2z5q4)9J5k6e0y4Q4x3X3g2#2x3%4l9`.

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课