Wireshark, the world's most trusted network protocol analyzer and the standard across many industries as well as educational institutions, is Wireshark.
Deep inspection of hundreds of protocols, with more being added all the timeLive capture and offline analysisStandard three-pane packet browserMulti-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many othersCaptured network data can be browsed via a GUI, or via the TTY-mode TShark utilityThe most powerful display filters in the industryRich VoIP analysisRead/write many different capture file formatsCapture files compressed with gzip can be decompressed on the flyLive data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platfrom)Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2Coloring rules can be applied to the packet list for quick, intuitive analysisOutput can be exported to XML, PostScript(r), CSV, or plain text