SharkFest’19 US Registration is open at!


Get Started Now


Knowledge is Power

Go Beyond

With SharkFest Sponsors

About Wireshark

Wireshark is the world’s foremost and widely-used network protocol analyzer. It lets you see what’s happening on your network at a microscopic level and is the de facto (and often de jure) standard across many commercial and non-profit enterprises, government agencies, and educational institutions. Wireshark development thrives thanks to the volunteer contributions of networking experts around the globe and is the continuation of a project started by Gerald Combs in 1998.

Wireshark has a rich feature set which includes the following:

  • Deep inspection of hundreds of protocols, with more being added all the time
  • Live capture and offline analysis
  • Standard three-pane packet browser
  • Multi-platform: Runs on Windows, Linux, macOS, Solaris, FreeBSD, NetBSD, and many others
  • Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility
  • The most powerful display filters in the industry
  • Rich VoIP analysis
  • Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others
  • Capture files compressed with gzip can be decompressed on the fly
  • Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platform)
  • Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2
  • Coloring rules can be applied to the packet list for quick, intuitive analysis
  • Output can be exported to XML, PostScript®, CSV, or plain text

What is SharkFest?

SharkFest™, launched in 2008, is a series of annual educational conferences staged in various parts of the globe and focused on sharing knowledge, experience and best practices among the Wireshark® developer and user communities.

SharkFest attendees hone their skills in the art of packet analysis by attending lecture and lab-based sessions delivered by the most seasoned experts in the industry. Wireshark core code contributors also gather during the conference days to enrich and evolve the tool to maintain its relevance in ensuring the productivity of modern networks.

Learn more about SharkFest in our FAQ PDF.

SharkFest Mission

SharkFest’s aim is to support ongoing Wireshark development, to educate and inspire current and future generations of computer science and IT professionals responsible for managing, troubleshooting, diagnosing and securing legacy and modern networks, and to encourage widespread use of the free analysis tool. Per Gerald Combs, Wireshark project Founder …“Wireshark is a tool and a community. My job is to support both”.

SharkFest GOALS

  1. To educate current and future generations of network engineers, network architects, application engineers, network consultants, and other IT professionals in best practices for troubleshooting, securing, analyzing, and maintaining productive, efficient networking infrastructures through use of the Wireshark free, open source analysis tool.
  2. To share use cases and knowledge among members of the Wireshark user and developer communities in a relaxed, informal milieu.
  3. To remain a self-funded, independent, educational conference hosted by a corporate sponsor.

SharkFest Conferences

SharkFest’19 US

  • June 8-10, Pre-Conference Class I: Wireshark Analysis Foundations AND Pre-Conference Class II: Hunt Like a Shark
  • June 10–13, SharkFest Conference
  • Location: UC Berkeley
    Berkeley, California

SharkFest’19 EUROPE

  • November 4-8
  • Location: Palacio Estoril Hotel

The Wireshark Foundation is profoundly grateful to the organizations that have generously supported SharkFest™ educational conferences over the years. Please join us in thanking them by reviewing their Wireshark use-enhancing technology, training, and services either at a SharkFest event, or through clicking on their ads below.

Learn Wireshark

Wireshark Training

Return to the Packet Trenches Part 1: Back to Basics

Return to the Packet Trenches Part 2: Multiplying the Effectiveness of Wireshark’s CLI

CLI Extension Reference Materials used in this presentation:

Wireshark CLI tools & scripting (by Sake Blok)

Presentation Video (1:11:14):

TShark Command Line using PowerShell (by Graham Bloice)

Custom LUA dissectors to the rescue in root cause analysis (by Sake Blok)

For more "Packet Trenches" resources, check out these links:

SharkFest™ Wireshark Educational Conferences

Join Gerald Combs, Hansang Bae, Kary Rogers, Sake Blok, Jasper Bongertz, Christian Landström, Phill Shade, and many other packet analysis experts at SharkFest, an immersive Wireshark training experience.

Contact [email protected] for more info.


Developer's Guide

The Wireshark Developers's Guide is available in several formats:
Web pages (browseable): One huge page or multiple pages
Web pages (ZIP file): One huge page or multiple pages
Windows HTML Help

User Documentation

User's Guide

The Wireshark User's Guide is available in several formats:
Web pages (browseable): One huge page or multiple pages
Web pages (ZIP file): One huge page or multiple pages
Windows HTML Help

Command-line Manual Pages

UNIX-style man pages for Wireshark, TShark, dumpcap, and other utilities

Display Filter Reference

All of Wireshark's display filters, from version 1.0.0 to present.

Release Notes

Version 0.99.2 to present.

Security Advisories

Information about vulnerabilities in past releases and how to report a vulnerability


Books, articles, videos and more!

Mirroring Instructions

How to set up a mirror

Export Regulations

Our primary distribution point and how it affects you

News and Events

  • SharkFest'19 EUROPE

    Wireshark Developer and User Conference
    Nov 4-8
    Palacio Estoril Hotel

  • SharkFest'19 US

    Wireshark Developer and User Conference
    June 8th - 13th
    UC Berkeley, California