WireShark for Mac
Network protocol analyzer.
Free
In English
Version 4.6.3When you purchase through links on our site, we may earn an affiliate commission
WireShark overview
Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.
Wireshark has a rich feature set which includes the following:
- Standard three-pane packet browser
- Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
- Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer which is useful for remote capture, analysis, and scripting
- The most powerful display filters in the industry
- VoIP analysis
- Live capture and offline analysis are supported
- Read/write many different capture file formats: tcpdump (libpcap), NAI's Sniffer (compressed and uncompressed), Sniffer Pro, NetXray, Sun snoop and atmsnoop, Shomiti/Finisar Surveyor, AIX's iptrace, Microsoft's Network Monitor, Novell's LANalyzer, RADCOM's WAN/LAN Analyzer, HP-UX nettl, i4btrace from the ISDN4BSD project, Cisco Secure IDS iplog, the pppd log (pppdump-format), the AG Group's/WildPacket's EtherPeek/TokenPeek/AiroPeek, Visual Networks' Visual UpTime and many others
- Capture files compressed with gzip can be decompressed on the fly
- Hundreds of protocols are supported, with more being added all the time
- Coloring rules can be applied to the packet list, which eases analysis
What’s new in version 4.6.3
Bug Fixes
- The following vulnerabilities have been fixed:
- Wnpa-sec-2026-01 BLF file parser crash. Issue 20880.
- Wnpa-sec-2026-02 IEEE 802.11 dissector crash. Issue 20939.
- Wnpa-sec-2026-03 SOME/IP-SD dissector crash. Issue 20945.
- Wnpa-sec-2026-04 HTTP3 dissector infinite loop. Issue 20944.
- The following bugs have been fixed:
- Wireshark 4.6.0 build fails on Solaris: pcapio.c:441:21: error: request for member '_flag' in something not a structure or union. Issue 20773.
- RTP player streams cannot be stopped. Issue 20879.
- Additional ABI/API compatibility fixes. Issue 20881.
- Missing data in pinfo→cinfo in HomePlug message CM_ATTEN_CHAR.IND. Issue 20893.
- Maxmind_db: crash when switching from a profile where it’s disabled to one where it’s enabled. Issue 20903.
- Compilation warning or error if CFLAGS defines _FORTIFY_SOURCE to other than 3 without first undefining it. Issue 20904.
- IEEE 802.11: incorrect parsing of QoS and Mesh Control Field when the frame body contains an A-MSDU. Issue 20905.
- Oss-fuzz 473164101: heap-buffer-overflow in dissect_idn_laser_data. Issue 20936.
- Bug in decoding 5G NAS message - Extended CAG information list IE. Issue 20946.
New Protocol Support
- There are no new protocols in this release.
Updated Protocol Support
- DCT2000, DHCP, H.248, H.265, HomePlug AV, HTTP3, IDN, IEEE 802.11, LTE RRC, NAS-5GS, PKCS12, QUIC, RTPS, SOME/IP-SD, SSH, and Thrift
New and Updated Capture File Support
- 3GPP TS 32.423 trace, BLF, NetScreen, and Viavi Observer
New and Updated File Format Decoding Support
- There is no new or updated file format support in this release.
WireShark for Mac
Free
In English
Version 4.6.3
Write a detailed review about WireShark
(30 Reviews of WireShark)
Comments
User Ratings
Feb 21 2025
Version: 4.4.4
Version 4.4.4 requires MacOS 11 (Big Sur) or newer.
MacUpdate staff, please update.
Feb 20 2025
Version: 4.2.11
v4.4.4 is out. Access it at the dev site. (The MU link is hitting a 404).
Oct 11 2024
Version: 4.4.1
v4.4.1 ARM (Apple Silicon) version is at: https://2.na.dl.wireshark.org/osx/Wireshark%204.4.1%20Arm%2064.dmg
Jun 16 2022
Version: 3.6.6
There is a native ARM version of Wireshark now as well. M1 & M2 Mac users need not bother with the Intel version. You'll find it at the Dev site: https://www.wireshark.org/download.html
Apr 15 2022
Version: 3.6.3
ARM versions of Wireshark are now available. If you have an M1 series Mac, be sure to get the Wireshark macOS Arm 64-bit .dmg version! The general downloads page is here: https://www.wireshark.org/download.html
