The world`s foremost network protocol analyzer for Windows

Wireshark (64-bit)

Browse by Company

Adobe, Apowersoft, Ashampoo, Autodesk, Avast, Corel, Cyberlink, Google, iMyFone, iTop, Movavi, PassFab, Passper, Stardock, Tenorshare, Wargaming, Wondershare

Wireshark 2.4.1 (64-bit)

  -  56.4 MB  -  Freeware
Free Download

Security Status

Sometimes latest versions of the software can cause issues when installed on older devices or devices running an older version of the operating system.

Software makers usually fix these issues but it can take them some time. What you can do in the meantime is to download and install an older version of Wireshark 2.4.1 (64-bit).


For those interested in downloading the most recent release of Wireshark (64-bit) or reading our review, simply click here.


All old versions distributed on our website are completely virus-free and available for download at no cost.


We would love to hear from you

If you have any questions or ideas that you want to share with us - head over to our Contact page and let us know. We value your feedback!

Download Wireshark 2.4.1 (64-bit)

  • Wireshark 2.4.1 (64-bit) Screenshots

    The images below have been resized. Click on them to view the screenshots in full size.

    Wireshark 2.4.1 (64-bit) Screenshot 1
  • Wireshark 2.4.1 (64-bit) Screenshot 2
  • Wireshark 2.4.1 (64-bit) Screenshot 3
  • Wireshark 2.4.1 (64-bit) Screenshot 4
  • Wireshark 2.4.1 (64-bit) Screenshot 5

What's new in this version:

Bug Fixes:
- wnpa-sec-2017-38. MSDP dissector infinite loop
- wnpa-sec-2017-39. Profinet I/O buffer overrun
- wnpa-sec-2017-40. Modbus dissector crash
- wnpa-sec-2017-41. IrCOMM dissector buffer overrun
- Incorrect presentation of Ascend-Data-Filter (RADIUS attribute 242)
- Confusing "Apply a display filter " keyboard shortcut
- Wireshark crashes at startup if it needs to display a dialog early in the startup process
- RADIUS dictionary: BEGIN-VENDOR does not support format=Extended-Vendor-Specific-*
- Dumpcap on big-endian machines writes out corrupt, unreadable Enhanced Packet Blocks
- Interface Toolbar support for Windows
- Wireshark should behave better on high resolution displays on Windows
- Udpdump.pod missing from build
- RTP Player Format Error
- VNC Protocol disector: Framebuffer Updates
- DNS LOC RRs with out-of-range longitude or latitude aren’t shown as errors
- DIS Dissector Entity Appearance Record displayed in wrong location
- Win64 CMake bug - (CYGWIN_INSTALL_PATH redefinition) causing missing packages when using CMake 3.9.0
- APL records parsed incorrectly for IPv4 prefixes
- File→Merge dialog doesn’t show all options. Resizing doesn’t help
- TCAP SRT Analysis incorrectly matched TCAP begins and ends
- Error in MKA Distributed SAK parameter set dissection
- E.212: Check length before trying 3-digits MNC
- mpeg_descriptor: AC3 System A: Respect descriptor length
- Crash in Wireshark using Dumper:dump() from Lua
- MRCPv2 not decoded correctly
- UDP Checksum verification not working for 0x0000 checksum
- OSPF v3 LSA Type not well parsed
- GTPv2 - decoding issue for Packet Flow ID (type 123)
- TRANSUM fails to calculate RTE figures for DCE-RPC where request Packet Type is zero
- BTLE Hop and SCA fields incorrectly dissected in BLE CONNECT_REQ
- [oss-fuzz] BGP memleak: ASAN: 276 byte(s) leaked in 5 allocation(s)
- Some Infiniband Connect Req fields are not decoded correctly
- GTP: gtp.ext_comm_flags_II_pmtsmi bit not decoded correctly
- InfiniBand: sIP and dIP inside IP CM Private Data are decoded in the wrong order
- 802.11 wlan.ft.subelem.r0kh_id should be sequence of bytes
- USB capture: Unrecognized libpcap format or not libpcap data
- SQ Header Pointer in NVMoF response capsule is decoded with the wrong endian

Updated Protocol Support:
- BGP, BT LE, DIS, DNS, E.212, EPL, GTP, GTPv2, IEEE 802.11, InfiniBand, IPv4, IrCOMM, MKA, Modbus, MPEG Descriptor, MRCPv2, MSDP, MTP2, Nordic BLE, NVMe, OSPF, pcapng MIME, PMIPv6, Profinet I/O, RADIUS, SML, TCAP, TRANSUM, UA3G, UDP, VNC, and ZigBee

Top Downloads

More Popular Software »