Question 1

Какие платформы поддерживает Wireshark?

Accepted Answer

Wireshark runs on Windows, macOS, Linux, and UNIX systems. It can be built from source on additional platforms. Current stable release is 4.6.6 with old stable 4.4.16 available for migration scenarios.

Question 2

Действительно ли Wireshark бесплатен?

Accepted Answer

Yes. Wireshark is free software under the GNU General Public License version 2. There is no license fee and no feature-limited demo.

Question 3

Законно ли захватывать сетевой трафик?

Accepted Answer

Capturing traffic on networks you own or are explicitly authorized to monitor is generally acceptable. Capturing other parties communications without permission may violate local law and workplace policy.

Question 4

Содержит ли Wireshark вредоносное ПО?

Accepted Answer

Official Wireshark installers do not bundle malware, adware, or spyware. Antivirus alerts often stem from Npcap driver behavior required for packet capture.

Question 5

В чём разница между capture и display filters?

Accepted Answer

Capture filters use Berkeley Packet Filter syntax and limit what is written to disk during live capture. Display filters use Wireshark filter syntax and only change what you see in an existing trace.

Question 6

Зачем нужен Npcap в Windows?

Accepted Answer

Npcap provides the Windows packet capture driver Wireshark uses to access network adapters. Without it, interfaces may not appear or capture will fail.

Question 7

Может ли Wireshark расшифровать HTTPS-трафик?

Accepted Answer

Wireshark can decrypt TLS only when you possess appropriate secrets such as pre-master keys from a browser SSLKEYLOGFILE or server private keys for some cipher suites.

Question 8

Какие форматы файлов поддерживает Wireshark?

Accepted Answer

Native format is pcapng. Wireshark also reads pcap and many vendor-specific capture formats.

Question 9

Что такое Wireshark Certified Analyst (WCA)?

Accepted Answer

The WCA certification validates practical skills in capturing, filtering, and analyzing network traffic with Wireshark.

Question 10

Как сообщить об уязвимости?

Accepted Answer

Security issues should be reported through the project responsible disclosure process. Do not publish exploit details before coordinated release of a fix.

Question 11

Можно ли использовать Wireshark в коммерческой среде?

Accepted Answer

Yes. The GPL allows commercial use. Using Wireshark unmodified to analyze your network does not require publishing internal captures or business data.

Часто задаваемые вопросы

Нужна дополнительная помощь?