wireshark

{
  "aliases": [],
  "alternatives": [
    "tcpdump",
    "nmap",
    "snort",
    "suricata",
    "netcat"
  ],
  "build_dependencies": [
    "cmake"
  ],
  "categories": [
    "networking",
    "network-analyzer",
    "packet-capture",
    "sysadmin"
  ],
  "caveats": "This formula only installs the command-line utilities by default.\n\nInstall Wireshark.app with Homebrew Cask:\n  brew install wireshark-app\n\nIf your list of available capture interfaces is empty\n(default macOS behavior), install ChmodBPF:\n  brew install --cask wireshark-chmodbpf\n",
  "conflicts_with": [],
  "dependencies": [
    "c-ares",
    "glib",
    "gnutls",
    "libgcrypt",
    "libmaxminddb",
    "libnghttp2",
    "libnghttp3",
    "libsmi",
    "libssh",
    "lua",
    "lz4",
    "pcre2",
    "speexdsp",
    "zstd",
    "libgpg-error"
  ],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Network analyzer and capture tool - without graphical user interface",
  "disable_reason": null,
  "disabled": 0,
  "enrichment_fetched_at": "2026-06-20T23:41:02+00:00",
  "first_seen": "2026-06-20T23:34:18+00:00",
  "full_name": "wireshark",
  "github_default_branch": null,
  "github_last_commit_at": null,
  "github_readme_excerpt": null,
  "github_repo": null,
  "github_stars": null,
  "github_topics": [],
  "homepage": "https://www.wireshark.org",
  "homepage_og_description": "Wireshark: The world\u0027s most popular network protocol analyzer",
  "homepage_og_image": "https://www.wireshark.org/assets/img/og-image.png",
  "homepage_title": "Wireshark \u2022 Go Deep",
  "installs_30d": 3832,
  "installs_365d": 66599,
  "installs_90d": 11588,
  "keg_only": 0,
  "keg_only_reason": null,
  "last_seen": "2026-06-20T23:34:18+00:00",
  "license": "GPL-2.0-or-later",
  "llm_generated_at": "2026-06-20T23:46:34+00:00",
  "llm_model": "claude-haiku-4-5",
  "name": "wireshark",
  "oldnames": [],
  "one_liner": "Network protocol analyzer and packet capture tool (CLI), the industry-standard for deep packet inspection.",
  "optional_dependencies": [],
  "rank_30d": 713,
  "rank_365d": 557,
  "rank_90d": 755,
  "raw_hash": "0d3ad09b67cf9388",
  "recommended_dependencies": [],
  "revision": 0,
  "ruby_source_path": "Formula/w/wireshark.rb",
  "tap": "homebrew/core",
  "test_dependencies": [],
  "uses_from_macos": [
    {
      "bison": "build"
    },
    {
      "flex": "build"
    },
    {
      "python": "build"
    },
    "krb5",
    "libpcap",
    "libxml2"
  ],
  "version_head": "HEAD",
  "version_stable": "4.6.6",
  "versioned_formulae": [],
  "why_use_this": "Wireshark is the de facto standard for network troubleshooting and forensic analysis. The CLI version (tshark) lets you capture, filter, and dissect packets in scripts and pipelines without a GUI, making it essential for automation, remote systems, and headless servers. It understands thousands of protocols and integrates into monitoring stacks."
}