the output from VMS’s TCPIPtrace/ TCPtrace/ UCX$TRACE utilities.the IPLog format output from the Cisco Secure Intrusion Detection System.the output from i4btrace from the ISDN4BSD project.Viavi (previously Network Instruments) Observer captures.LiveAction (previously WildPackets/Savvius) *Peek/ EtherHelp/ PacketGrabber captures.Network General/Network Associates DOS-based Sniffer captures (compressed or uncompressed).NETSCOUT (previously Network Associates/Network General) Windows-based Sniffer captures.Finisar (previously Shomiti) Surveyor captures.Oracle (previously Sun) snoop and atmsnoop captures.Wireshark can also read / import the following file formats:

pcap format is also the format used by tcpdump and various other tools tcpdump, when using newer verions of the libpcap library, can also read some pcapng files, and, on newer versions of macOS, can read all pcapng files and can write them as well. Wireshark's native capture file formats are pcapng format and pcap format it can read and write both formats.

It lets you interactively browse packet data from a live network or from a previously saved capture file. Wireshark is a GUI network protocol analyzer. Interactively dump and analyze network traffic Synopsis

Wireshark protocol filter 1