What Wireshark does

Wireshark is a free, open-source network protocol analyzer founded in 1998 (originally released as Ethereal in July 1998 and renamed in 2006) that enables deep packet capture, dissection, and inspection across hundreds of network protocols on Windows, macOS, Linux, and UNIX systems. The core application is built on the libpcap/Npcap packet-capture libraries and provides live and offline analysis of Ethernet, Wireless LAN, Bluetooth, USB, and other network media, accompanied by a suite of command-line utilities (TShark, dumpcap, editcap, mergecap, capinfos, text2pcap, reordercap, mmdbresolve, rawshark), the MATE meta-analysis extension framework, VoIP and RTP analysis tools, and the related Stratoshark project for cloud environments. Releases are issued approximately every four to six weeks, with the current stable line at version 4.6.x.

The software is distributed under the GNU General Public License version 2 (GPL v2) at no cost to users, and the project is stewarded by the Wireshark Foundation, a 501(c)(3) nonprofit corporation established in 2023. With no software-licensing revenue, the foundation's funding derives from user and organizational donations, Platinum/Gold/Silver corporate sponsorships, the annual SharkFest developer and user conference, and, since June 2025, the newly introduced Wireshark Certified Analyst (WCA) professional certification program and associated Hands On Labs training platform. The tool serves network administrators, network security engineers, QA engineers and developers, and students/educators, with an active community of 100,000+ contributors and 20+ million annual downloads across 20+ language localizations.

The go-to-market motion is entirely community-led: there is no commercial sales team, no paid advertising, and no tiered pricing structure; users self-serve downloads from wireshark.org or via native Linux package managers, and engagement is sustained through GitLab source contributions, mailing lists, Discord, the SharkBytes podcast, the Ask Wireshark Q&A forum, and the SharkFest conference. Strategic emphasis has shifted toward monetization through certification, training, and corporate sponsorship while preserving the GPL-licensed core product.

Name

Wireshark

Legal name

Wireshark Foundation

Website

https://wireshark.org

Company type

Private

Founded year

1998

Operating status

Operating

Headcount range

11–50 employees

Short description

Wireshark is a free, open-source network protocol analyzer maintained by the Wireshark Foundation that delivers deep packet inspection across hundreds of protocols for network administrators, security engineers, QA developers, and educators worldwide.

Ownership category

akta.pro rank

Headquarters

HQ city

Davis

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Operations, Infrastructure, Marketing or Sales

Revenue model

1. Software Distribution: Wireshark is entirely free and open-source software distributed under GNU General Public License version 2 (GPL v2). No revenue is generated from software sales or licensing. The product is available for free download with full functionality — no demo or trial limitations.
2. Donations and Sponsorships: Wireshark is maintained by the Wireshark Foundation, a non-profit 501(c)(3) organization. The foundation is funded by donations from users and organizations, as well as corporate sponsorships at Platinum, Gold, and Silver levels. The project hosts SharkFest conferences and maintains member/sponsor tiers.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels9 records

Core offering

Wireshark is a free, open-source network protocol analyzer (GNU GPL v2) that lets users capture and interactively browse traffic on a computer network, providing deep inspection of hundreds of protocols. It is offered as cross-platform desktop software (Windows, macOS, Linux, UNIX) and is distributed, supported, and certified through the Wireshark Foundation, with companion CLI tools, training, and certification programs.

Product overview

Wireshark is a single, unified open-source network protocol analyzer (free and open source under GNU GPL) that provides comprehensive packet capture and analysis capabilities. The core Wireshark application offers deep inspection of hundreds of network protocols with a GUI-based interface. The product suite includes companion command-line tools (TShark, dumpcap, editcap, mergecap, etc.), the MATE analysis extension framework, the Wireshark Certified Analyst (WCA) professional certification program, and the related Stratoshark offshoot project for cloud environments. SharkFest conferences and Wireshark Hands On Labs provide community training and education. Recent releases have focused on enhanced encryption protocol decoding, improved platform support, and bug fixes.

Differentiator

Problem solved

Functional benefit

Brands

• Stratoshark: A related network analysis tool mentioned on the Wireshark website.

Products and services

• Wireshark Free, open-source (GNU GPL v2) GUI-based network protocol analyzer that captures live and offline traffic and provides deep inspection of hundreds of protocols across Windows, macOS, Linux, and UNIX. Used by network administrators, security engineers, QA engineers, developers, students, and educators.
• TShark Terminal-based command-line network protocol analyzer that mirrors Wireshark's GUI functionality for automated, scripted, or remote packet analysis workflows.
• Wireshark Certified Analyst (WCA) Professional certification program administered by the Wireshark Foundation, offering training courses and certification exams to validate expertise in using Wireshark for network and packet analysis.
• SharkFest Annual developer and user conference hosted by the Wireshark Foundation, featuring training sessions, presentations, and community collaboration for Wireshark users and contributors (the 2025 and 2026 events include SharkFest US and SharkFest Europe).
• Wireshark Hands On Labs Online training platform (wiresharklabs.org) offering interactive labs and courses for learning Wireshark network analysis skills, including preparation for the WCA certification.
• Stratoshark Related open-source network analysis project maintained by the Wireshark community, focused on cloud and containerized environments, with its own downloads referenced from wireshark.org.

Quantifiable outcome

• 20M+ downloads annually
• +2 more outcomes

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability2 records

Feature7 records

Partnerships

Two partnerships are on record, tiered core.

• StratosharkcoreStrategic or Co-development PartnerStratoshark is a related open-source project maintained by the Wireshark community. It is referenced on the main Wireshark website as a related download option, suggesting close alignment and potential code sharing or integration between the projects.
• Wireshark FoundationcoreOthersThe Wireshark Foundation is the non-profit 501(c)(3) organization that maintains and supports Wireshark. Founded in 2023, it provides the project's infrastructure, hosts SharkFest conferences, and promotes low-level network education. The foundation is funded by donations and corporate sponsorships.

Scale indicators6 records

Recent moves8 records

Expansion highlights6 records

Market position

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgitlab.com/wireshark/wireshark
• YouTubeyoutube.com/@WireSharkFest
• Xx.com/wiresharknews
• Facebookfacebook.com/WiresharkNews

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Wireshark