Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 30 Sept 2026

TShark

Ch 117.0of 33 Network Packet Analyzer Software
  1. 1Runs onLinux, Mac, Windows
  2. 2CostsFree plan
  3. 3Traffic decryptionYes
3 lines stated Written from the maker's own pages: wireshark.org
Visit site Alternatives
The TShark homepage

Overview

TShark is ranked #11 of 33 in network packet analyzer software on Specifiction. It runs on Linux, macOS, Windows. There is a free plan.

TShark plans and pricing

All plans
Free Free GNU GPL v2 · network protocol analyzer wireshark.org · 30 Sept 2026

Compared on network packet analyzer software

Free plan
Yeswireshark.org
Traffic decryption
Yeswireshark.org

Facts

Purpose
TShark captures live network traffic or reads saved captures, then decodes packets for output or writes them to a file.wireshark.org · 30 Sept 2026
Packet formats
TShark uses pcapng as its native capture format and can read and write capture files supported by Wireshark.wireshark.org · 30 Sept 2026
Protocol analysis
TShark provides display filters for selecting packets and protocol fields, using the same syntax as Wireshark.wireshark.org · 30 Sept 2026
Output
TShark can output packet data in formats including fields, JSON, PDML, and text.wireshark.org · 30 Sept 2026
Capture controls
Capture options include interface selection, capture filters, packet limits, and ring-buffer files.wireshark.org · 30 Sept 2026
Analysis limit
Display filters are not supported when TShark captures and saves packets with the -w option.wireshark.org · 30 Sept 2026
File size limit
The manual states that capture file size is limited to a maximum of 2 TB, and notes potential issues above 2^32 packets.wireshark.org · 30 Sept 2026
Integration
TShark can write ElasticSearch mapping data and supports piping packet output to another program or script.wireshark.org · 30 Sept 2026
Project features
The Wireshark project describes TShark as its terminal-mode utility and lists live capture, offline analysis, protocol inspection, and display filters among its features.wireshark.org · 30 Sept 2026
Supported systems
The project lists Windows, Linux, macOS, FreeBSD, NetBSD, and other platforms as supported by Wireshark.wireshark.org · 30 Sept 2026
License
Wireshark is freely available under the GNU General Public License version 2, with no license fee for downloading.wireshark.org · 30 Sept 2026
Security information
The documentation page links to security advisories covering past vulnerabilities and how to report a vulnerability.wireshark.org · 30 Sept 2026
Support and learning
The project offers documentation, mailing lists, community forums, and educational resources including SharkFest.wireshark.org · 30 Sept 2026
Maker
The Wireshark project is maintained by the Wireshark Foundation, described as a nonprofit supported by donations.wireshark.org · 30 Sept 2026

Best TShark alternatives

See all 20
All accessCh 01 NETCAP Free planFree trialLinux from $548/mo7.7 All accessCh 02 PacketSafari Free planAPILinux Free to start7.4 All accessCh 03 Scapy Free planAPILinux Free to start7.4 All accessCh 04 NetworkMiner Free planLinuxMac Free to start7.3 All accessCh 05 Malcolm APILinux 7.2 All accessCh 06 Sniffnet Free planLinuxMac Free to start7.1

Where it ranks on Specifiction

Is TShark yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote TShark

Sources