Wireshark

Wireshark at a glance

Wireshark is the standard network protocol analyzer for troubleshooting, forensics and security work — on many admin and analyst machines. The project ships regular releases; security fixes frequently address the dissectors, which parse untrusted network data.

For admins the dissector vulnerabilities are the reason to stay current: opening or capturing a malicious packet can trigger a flaw, so a recent version matters, especially on analysis machines. Roll it out via the package manager or winget; source it officially. On Windows it bundles the Npcap driver, which carries its own security updates and should be kept current alongside Wireshark. New versions bring protocol support and fixes. Capturing traffic has privacy and legal implications — scope it to authorized networks.