wireshark
Network traffic analyzer - graphical interface
Matches ATT&CK tactic: Discovery ↗
Toolnetwork-sniffingdiscoveryredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
Wireshark is a network “sniffer” - a tool that captures and analyzes packets off the wire. Wireshark can decode too many protocols to list here.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on Kali Linux with `sudo apt install wireshark`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.
