介绍
Wireshark（前称Ethereal）是一款免费开源的网络嗅探抓包工具，世界上最流行的网络协议分析器！网络封包分析软件的功能是撷取网络封包，并尽可能显示出最为详细的网络封包资料。Wireshark网络抓包工具使用WinPCAP作为接口，直接与网卡进行数据报文交换，可以实时检测网络通讯数据，检测其抓取的网络通讯数据快照文件，通过图形界面浏览这些数据，可以查看网络通讯数据包中每一层的详细内容。它的强大特性：例如包含有强显示过滤器语言和查看TCP会话重构流的能力，支持上百种协议和媒体类型。
软件截图
更新日志
Bug Fixes
The following vulnerabilities have been fixed:
wnpa-sec-2022-01 RTMPT dissector infinite loop.
wnpa-sec-2022-02 Large loops in multiple dissectors.
wnpa-sec-2022-03 PVFS dissector crash. Issue 17840.
wnpa-sec-2022-04 CSN.1 dissector crash. Issue 17882.
wnpa-sec-2022-05 CMS dissector crash. Issue 17935.
The following bugs have been fixed:
Support for GSM SMS TPDU in HTTP2 body Issue 17784.
Wireshark 3.6.1 broke the ABI by removing ws_log_default_writer from libwsutil Issue 17822.
Fedora RPM package build failing with RPATH of /usr/local/lib64 Issue 17830.
macos-setup.sh: ftp.pcre.org no longer exists Issue 17834.
nmap.org/npcap → npcap.com: domain/URL change Issue 17838.
MPLS ECHO FEC stack change TLV not dissected correctly Issue 17868.
Attempting to open a systemd journal export file segfaults Issue 17875.
Dissector bug on 802.11ac packets Issue 17878.
The Info column shows only one NGAP/S1AP packet of several packets inside an SCTP packet Issue 17886.
Uninstalling Wireshark 3.6.1 on Windows 10 fails to remove the installation directory because it doesn’t remove the User’s Guide subdirectory and all its contents. Issue 17898.
3.6 doesn’t build without zlib Issue 17899.
SIP Statistics no longer properly reporting method type accounting Issue 17904.
Fuzz job crash output: fuzz-2022-01-26-6940.pcap Issue 17909.
SCTP retransmission detection broken for the first data chunk of each association with relative TSN Issue 17917.
“Show In Folder” doesn’t work correctly for filenames with spaces Issue 17927.
New and Updated Features
Updated Protocol Support
AMP, ASN.1 PER, ATN-ULCS, BGP, BP, CFLOW, CMS, CSN.1, GDSDB, GSM RP, GTP, HTTP3, IEEE 802.11 Radiotap, IPDC, ISAKMP, Kafka, MP2T, MPEG PES, MPEG SECT, MPLS ECHO, NGAP, NTLMSSP, OpenFlow 1.4, OpenFlow 1.5, P_MUL, PN-RT, PROXY, PTP, PVFS, RSL, RTMPT, rtnetlink, S1AP, SCTP, Signal PDU, SIP, TDS, USB, WAP, and ZigBee ZCL
New and Updated Capture File Support
BLF and libpcap