We stand with Ukraine to help keep people safe. Join us
All Apps
Best AppsReviewsComparisonsHow-To
When you purchase through links on our site, we may earn an affiliate commission

WireShark for Mac

Network protocol analyzer.

Free
In English
Version 4.4.4
4.1
Based on 27 user rates

WireShark overview

Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.

Wireshark has a rich feature set which includes the following:

  • Standard three-pane packet browser
  • Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
  • Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer which is useful for remote capture, analysis, and scripting
  • The most powerful display filters in the industry
  • VoIP analysis
  • Live capture and offline analysis are supported
  • Read/write many different capture file formats: tcpdump (libpcap), NAI's Sniffer (compressed and uncompressed), Sniffer Pro, NetXray, Sun snoop and atmsnoop, Shomiti/Finisar Surveyor, AIX's iptrace, Microsoft's Network Monitor, Novell's LANalyzer, RADCOM's WAN/LAN Analyzer, HP-UX nettl, i4btrace from the ISDN4BSD project, Cisco Secure IDS iplog, the pppd log (pppdump-format), the AG Group's/WildPacket's EtherPeek/TokenPeek/AiroPeek, Visual Networks' Visual UpTime and many others
  • Capture files compressed with gzip can be decompressed on the fly
  • Hundreds of protocols are supported, with more being added all the time
  • Coloring rules can be applied to the packet list, which eases analysis

What’s new in version 4.4.4

The following bugs have been fixed:
  • Crash when sorting columns during capture with display filter active. Issue 20263.
  • OSS-Fuzz 384757274: Invalid-bool-value in dissect_tcp. Issue 20300.
  • Test failure in 4.4.2/4.4.3: test_sharkd_req_follow_http2. Issue 20330.
  • Regression in extcap interface toolbar. Issue 20354.
  • Clicking outside columns in TCP tab of Statistics → Conversations window causes crash. Issue 20357.
  • FTBFS with Ubuntu development (25.04) release. Issue 20359.
  • DNS enable_qname_stats crash Wireshark when QDCOUNT == 0. Issue 20367.
  • Windows: Android extcap plugin fails with "Broken socket connection" if there are no new packets for 2sec. Issue 20386.
  • TECMP: Calculation of lifecycle start in Status message is wrong. Issue 20387.
  • MQTT v5.0 properties total length presentation is incorrect. Issue 20389.
  • TShark doesn’t resolve addresses in custom "hosts" files. Issue 20391.
  • Incorrect JA4 fingerprint with empty ciphers. Issue 20394.

Full list of changes available here

WireShark for Mac

Free
In English
Version 4.4.4
Write a detailed review about WireShark

Write your thoughts in our old-fashioned comment

MacUpdate Comment Policy. We strongly recommend leaving comments, however comments with abusive words, bullying, personal attacks of any type will be moderated.
4.1

(30 Reviews of WireShark)

  • Comments

  • User Ratings

Holypoly
Holypoly
Feb 21 2025
4.4.4
0.0
Feb 21 2025
0.0
Version: 4.4.4
Version 4.4.4 requires MacOS 11 (Big Sur) or newer. MacUpdate staff, please update.
Derekcurrie
Derekcurrie
Feb 20 2025
4.2.11
4.0
Feb 20 2025
4.0
Version: 4.2.11
v4.4.4 is out. Access it at the dev site. (The MU link is hitting a 404).
Derekcurrie
Derekcurrie
Oct 11 2024
4.4.1
4.0
Oct 11 2024
4.0
Version: 4.4.1
v4.4.1 ARM (Apple Silicon) version is at: https://2.na.dl.wireshark.org/osx/Wireshark%204.4.1%20Arm%2064.dmg
Derekcurrie
Derekcurrie
Jun 16 2022
3.6.6
4.0
Jun 16 2022
4.0
Version: 3.6.6
There is a native ARM version of Wireshark now as well. M1 & M2 Mac users need not bother with the Intel version. You'll find it at the Dev site: https://www.wireshark.org/download.html
Derekcurrie
Derekcurrie
Apr 15 2022
3.6.3
4.0
Apr 15 2022
4.0
Version: 3.6.3
ARM versions of Wireshark are now available. If you have an M1 series Mac, be sure to get the Wireshark macOS Arm 64-bit .dmg version! The general downloads page is here: https://www.wireshark.org/download.html
y66606
y66606
Mar 30 2024
4.2.4
2.0
Mar 30 2024
2.0
Version: 4.2.4
CyberSkull
CyberSkull
Dec 10 2023
4.2.0
5.0
Dec 10 2023
5.0
Version: 4.2.0
RYU224
RYU224
Mar 6 2023
4.0.4
4.0
Mar 6 2023
4.0
Version: 4.0.4
Dogbert1
Dogbert1
Sep 9 2022
3.6.8
5.0
Sep 9 2022
5.0
Version: 3.6.8
Derekcurrie
Derekcurrie
Nov 18 2021
3.4.10
4.0
Nov 18 2021
4.0
Version: 3.4.10
Frankydin
Frankydin
Jan 6 2021
5.0
Jan 6 2021
5.0
Version: null
winonafonda
winonafonda
Nov 12 2020
5.0
Nov 12 2020
5.0
Version: null
somers96
somers96
Nov 6 2020
1.0
Nov 6 2020
1.0
Version: null
polejai538
polejai538
May 21 2020
5.0
May 21 2020
5.0
Version: null
Chocky
Chocky
Mar 1 2019
5.0
Mar 1 2019
5.0
Version: null
nomorebugs
nomorebugs
Jul 25 2018
5.0
Jul 25 2018
5.0
Version: null
Jpinoniemi
Jpinoniemi
Jan 8 2015
5.0
Jan 8 2015
5.0
Version: null
Holgorio
Holgorio
Sep 18 2014
4.0
Sep 18 2014
4.0
Version: null
Ededed
Ededed
Apr 22 2014
4.0
Apr 22 2014
4.0
Version: null
Alain-devroye
Alain-devroye
Nov 6 2013
3.5
Nov 6 2013
3.5
Version: null
Mac-Application
Mac-Application
Jul 27 2013
5.0
Jul 27 2013
5.0
Version: null
JaeyoonLee4930
JaeyoonLee4930
Apr 11 2013
5.0
Apr 11 2013
5.0
Version: null
bluecheese
bluecheese
Mar 16 2013
5.0
Mar 16 2013
5.0
Version: null
Anon42
Anon42
Mar 29 2012
0.5
Mar 29 2012
0.5
Version: null
frequencydip
frequencydip
Nov 5 2011
4.5
Nov 5 2011
4.5
Version: null
Lachtigall
Lachtigall
Nov 3 2011
1.5
Nov 3 2011
1.5
Version: null
JohnKHeath
JohnKHeath
Oct 22 2011
4.5
Oct 22 2011
4.5
Version: null
angelowales79
angelowales79
Sep 30 2011
4.5
Sep 30 2011
4.5
Version: null
anonymous-aardvark-5710
Jun 8 2011
5.0
Version: null
FAM9
FAM9
Jun 3 2011
4.5
Jun 3 2011
4.5
Version: null
Alcimedes
Alcimedes
May 17 2007
4.0
May 17 2007
4.0
Version: null
anilmushi
anilmushi
Jan 11 2030
3.4.5
5.0
Jan 11 2030
5.0
Version: 3.4.5