Download Wireshark 4.0.1

Version 4.0.1 of the open source protocol analyzer and packet sniffer Wireshark has been released, a development version. This program allows the analysis of various data packets and network protocols on the network. The program can also use previously saved data traffic as input. Wireshark is downloadable for 64-bit versions of Windows and macOS. The source code is available for use on Linux, Solaris and *BSD. Since version 4.0, 32-bit versions are no longer available. The changelog for this release shows the following changes and improvements:

What’s New

• The Windows installers now ship with Qt 5.15.2. They previously shipped with Qt 6.2.3.

The following bugs have been fixed:

• Comparing a boolean field against 1 always succeeds on big-endian machines. Issue 12236.
• Qt: MaxMind GeoIP columns not added to Endpoints table. Issue 18320.
• Fuzz job crash output: fuzz-2022-10-04-7131.pcap. Issue 18402.
• The RTP player might not play audio on Windows. Issue 18413.
• Wireshark 4.0 breaks display filter expression with > sign. Issue 18418.
• Capture filters not working when using SSH capture and dumpcap. Issue 18420.
• Packet diagram field values ​​are not terminated. Issue 18428.
• Packet bytes not displayed completely if scrolling. Issue 18438.
• Fuzz job crash output: fuzz-2022-10-13-7166.pcap. Issue 18467.
• Decoding bug H.245 userInput Signal. Issue 18468.
• CFDP dissector doesn’t handle \”destination filename\” only. Issue 18495.
• Home page capture button doesn’t pop up capture options dialog. Issue 18506.
• Missing dot in H.248 protocol name. Issue 18513.
• Missing dot for protocol H.264 in protocol column. Issue 18524.
• Fuzz job crash output: fuzz-2022-10-23-7240.pcap. Issue 18534.

Removed Features and Support

• The experimental display filter syntax for literals using angle brackets <…​> that was introduced in Wireshark 4.0.0 has been removed. For byte arrays a colon prefix can be used instead. See the User’s Guide for details.

UpdatedProtocol Support

• ASN.1 PER
• CFDP
• Diameter
• DirectPlay
• F5 Ethernet Trailer
• GTP
• H.223
• H.248
• H.264
• H.265
• IEEE 802.11
• IPv4
• MBIM
• O-RAN FH CUS
• CFCP
• RTCP
• SCTP
• SMB
• TCP
• TRANSUM

New and Updated Capture File Support

• BLF

The following downloads are available:
Wireshark 4.0.1 for Windows (64bit)
Wireshark 4.0.1 for PortableApps
Wireshark 4.0.1 for macOS (Arm, 64bit)
Wireshark 4.0.1 for macOS (Intel, 64bit)
Wireshark 4.0.1 source code for Linux, Solaris and *BSD, among others