WireShark

is a freeopen source and packet analyzernetwork communications protocoltcpdump. It is used for graphicalfront-end troubleshooting, analysis, software and development, and education. Wireshark is very similar to , but has a , plus some integrated sorting and filtering options.

Wireshark lets the user put network interface controllers promiscuous mode into network interface controller packet analyzer(if supported by the network switch Port mirroring), so they can see all the traffic visible on that interface including unicast traffic not sent to that network interface controller's MAC address. However, when capturing with a network taps in promiscuous mode on a port on a , not all traffic through the switch is necessarily sent to the port where the capture is done, so capturing in promiscuous mode is not necessarily sufficient to see all network traffic. or various extend capture to any point on the network.