In other words, it allows capturing WiFi network traffic in promiscuous mode on a WiFi network. However, Wireshark includes Airpcap support, a special -and costly- set of WiFi hardware that supports WiFi traffic monitoring in monitor mode. Winpcap Capture Limitations and WiFi traffic on WiresharkĬapture is mostly limited by Winpcap and not by Wireshark. Monitor mode for Windows using Wireshark is not supported by default.

Winpcap libraries are not intended to work with WiFi network cards, therefore they do not support WiFi network traffic capturing using Wireshark on Windows. Real-time data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, token ring, frame relay, FDDI, etc.Wireshark uses libpcap or Winpcap libraries to capture network traffic on Windows.Capture files compressed with gzip can be decompressed on the fly.Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, etc.The most powerful display filter in the industry.The captured network data can be browsed through the GUI or through the TTY mode TShark utility.Multi-platform: runs on Windows, Linux, macOS, Solaris, FreeBSD, NetBSD and many other platforms.In-depth inspection of hundreds of protocols, and more protocols are being added all the time.

Download wireshark for windows 7 free