Wireshark for PC: How to Download and Install on Windows (2026 Guide)

When an app refuses to connect, a stream keeps buffering, or you simply want to know what your network is really doing, guessing gets you nowhere. Wireshark shows you the actual traffic — every packet crossing your network adapter, decoded into plain, readable language.

This guide shows you how to download Wireshark for PC from its official website, install it on Windows 11 or 10 including the Npcap driver it needs, and capture your first packets. Features, system requirements, and first-use steps are covered below — along with the simple pricing picture, because Wireshark is completely free and open source.

What Is Wireshark?

Wireshark is a free, open-source network protocol analyser — the standard tool that network administrators, security analysts, and developers reach for when they need to see what is happening on a network. It records the packets passing through your network adapter and dissects them into hundreds of protocols, from DNS and HTTP to TLS and VoIP signalling.

Think of it as a microscope for networks. Instead of a useless “the connection failed” message, you see the exact request that went out, the reply that came back (or never did), and the timing in between — which is why Wireshark is as valuable for learning how networks work as it is for fixing them.

Key Features of Wireshark

Live capture and offline analysis: Record traffic in real time, or open capture files (pcap and pcapng) saved by other tools.
Deep protocol inspection: Dissectors for hundreds of protocols decode packets into readable fields at every layer.
Powerful display filters: Narrow a million packets down to the one conversation you care about, by address, protocol, or content.
Follow streams: Rebuild an entire TCP or HTTP conversation in order and read it from start to finish.
TLS decryption with keys: Decrypt your own captured HTTPS sessions when you supply the session keys, for debugging.
VoIP and media analysis: Inspect call signalling and RTP audio streams, with playback for supported codecs.
Statistics and graphs: Endpoint lists, I/O graphs, and flow diagrams that reveal patterns raw packets hide.

System Requirements

Operating System: Windows 11 or Windows 10 (64-bit)
Processor: Any modern Intel or AMD CPU
RAM: 4 GB recommended; very large capture files benefit from 8 GB or more
Storage: About 1 GB for the program, plus room for capture files, which can grow quickly
Display: 1280×1024 or higher recommended for the three-pane packet view
Internet: Only needed for the download
Account: None — no sign-up, licence key, or activation

How to Download Wireshark (Official Method)

Wireshark is a favourite lure on fake download sites, which wrap the genuine installer with adware and browser hijackers — an ironic fate for a security tool. The real program is free from the Wireshark Foundation, so get it only from the official website linked below.

Official Website: Download Wireshark from the official website

Step-by-Step Installation

Open the official Wireshark download page linked above.
Click the Windows x64 installer for the current stable release.
Save the installer to your Downloads folder.
Double-click it and approve the Windows permission prompt — administrator rights are needed for the capture driver.
Keep the default components selected as you click through the setup wizard.
When the Npcap installer appears, install it with the default options — Wireshark needs Npcap for live capture on Windows.
Finish the setup and launch Wireshark from the Start menu — your network interfaces appear on the welcome screen with live traffic graphs.

First-launch note: The wavy lines next to each interface on the welcome screen show which adapters are actually carrying traffic — double-click the busy one to start capturing on the right network.

How to Capture Your First Packets with Wireshark

On the welcome screen, double-click your active interface — Wi-Fi or Ethernet, the one with the moving traffic graph.
Capturing starts immediately; open a website in your browser to generate some traffic to look at.
After 20–30 seconds, click the red square Stop button on the toolbar.
Type dns in the display filter bar and press Enter to see only the DNS lookups your PC just made.
Click any packet once to inspect its layers in the middle pane; right-click a TCP packet and choose Follow → TCP Stream to read a whole conversation.
Save the capture with File → Save As if you want to analyse it again later.

Wireshark Free vs Paid: What Is the Difference?

There is no difference to explain, because there is no paid version. Wireshark is free and open-source software, maintained by the Wireshark Foundation and a large community of contributors, and supported by sponsors and donations. The download from the official website is the complete tool — no trial, no “pro” edition, no feature locked behind payment, for home, student, and professional use alike.

That also means anyone charging you for Wireshark is running a scam. The genuine program costs nothing, forever. If you find it valuable, the project accepts donations — but paying is purely optional and unlocks nothing extra.

Frequently Asked Questions

Is Wireshark safe to download and use?
Yes, from the official website linked above. Wireshark is developed in the open by the Wireshark Foundation and is trusted by security professionals worldwide. The dangerous copies are the adware-bundled installers on fake download sites.

Is Wireshark free?
Yes — completely. It is free and open-source software with no paid edition and no trial period. You may use it at home, at work, and in commercial environments without paying anything.

Is it legal to capture traffic with Wireshark?
On your own devices and networks, yes. Capturing other people’s traffic without permission can break the law and your network’s rules, so only inspect networks you own or are authorised to administer — that is how professionals use it.

What is Npcap, and do I need it?
Npcap is the Windows packet-capture driver that the Wireshark installer offers to install. You need it for live capturing on Windows. Without it, Wireshark can still open and analyse capture files recorded elsewhere.

Conclusion

Wireshark turns network mysteries into readable evidence, and it does so for free. Download it from the official website, capture thirty seconds of your own traffic, and filter it down — few tools teach you more about how the internet actually works, or solve connection problems faster.

Download Wireshark from the Official Website

Wireshark for PC: How to Download and Install on Windows (2026 Guide)