Wireshark
Wireshark is a network protocol analyzer for capturing, inspecting, and troubleshooting traffic on local and remote networks.
What is Wireshark?
Wireshark is a network protocol analyzer that helps users capture and inspect network traffic in detail on macOS and other platforms. It is widely used by network administrators, security teams, developers, students, and IT support staff to troubleshoot connectivity problems, examine protocol behavior, and understand how devices communicate. The app can capture live packets from network interfaces, open saved capture files, and decode many protocols into readable fields and conversations. Its interface is built for detailed analysis, with packet lists, protocol details, and raw byte views that make it easier to trace requests, responses, errors, and timing issues. Wireshark also supports display filters, search tools, statistics, and stream-following features that help users isolate the traffic they need to study. Wireshark is published by the Wireshark Foundation and is a standard tool for packet analysis, protocol learning, and incident investigation workflows.
Key features
- Capture live network traffic from available interfaces
- Open and inspect saved packet capture files
- Filter packets to focus on specific hosts, protocols, or conversations
- Follow TCP, UDP, and other streams to review exchanges in context
- View decoded protocol details alongside raw packet bytes
- Use statistics and analysis tools to spot errors, latency, and traffic patterns
Review app leftovers with diCleaner
Inspect caches, support files, containers, and login items before cleaning.
Safety overview
Status: Use with caution
Wireshark is legitimate network analysis software, but it can expose the contents of network traffic you capture, including device details, connection metadata, and sometimes unencrypted data. Packet capture may require additional components or elevated permission depending on how your Mac is configured, which is normal for this kind of tool. Use it only on networks and systems you are authorized to analyze, and store capture files carefully if they may contain sensitive information.
Recommendation: Keep Wireshark if you use your Mac for network troubleshooting, protocol analysis, security work, or technical study. If you no longer capture or inspect traffic, you can remove it like other apps, but any saved packet captures should be reviewed first because they may contain sensitive network information.
Common paths
/Applications/Wireshark.app
Share your experience
Be the first to share your experience.