Wireshark 4.0 also adds support for new network protocols, including Allied Telesis Loop Detection (AT LDF), AUTOSAR I-PDU Multiplexer (AUTOSAR I-PduM), DTN Bundle Protocol Security (BPSec), DTN Bundle Protocol Version 7 (BPv7), DTN TCP Convergence Layer Protocol (TCPCL), DVB Selection Information Table (DVB SIT), Enhanced Cash Trading Interface 10.0 (XTI), and Enhanced Order Book Interface 10.0 (EOBI). Other noteworthy changes include an updated “Capture Options” dialog that now contains the same configuration icon as the Welcome Screen, replacement of the ‘v’ (lower case) and ‘V’ (upper case) switches with editcap and mergecap to match other command line utilities, and support for sorting active interfaces first and only display sparklines in the interface list on the Welcome page. Wireshark 4.0 also brings support for ASA, IOS, and IOS-XE remote capturing to ciscodump, support for displaying JSON mapping for Protobuf messages, the ability to set extcap passwords in tshark and other command-line tools, as well as support for the Extcap configuration dialog to support and remembers empty strings and password items during runtime so you can run extcaps multiple times.

This release also introduces a new address type AT_NUMERIC that allows simple numeric addresses for protocols that don’t have a more common-style address approach, support for fake headers in the HTTP2 dissector to parse the DATAs of streams that are captured without first HEADERS frames of a long-lived stream, and support for Mesh Connex (MCX) in the IEEE 802.11 dissector. Major highlights of the Wireshark 4.0 release include a more powerful display filter syntax with support for many new extensions, redesigned Conversation and Endpoint dialogs, updated main window layout with side by side Packet Detail and Packet Bytes sections underneath the Packet List pane, improved Hex dump imports, as well as faster and greatly improved MaxMind geolocation.

Wireshark, the world’s most popular and widely-used open-source and cross-platform network protocol analyzer, has been updated to version 4.0, a major release that adds support for new protocols and other changes.

Wireshark linux command line