Monday, March 18, 2019

Wireshark Portable, the network protocol analyzer (with the industry-standard Windows packet capture library)!
"Finding fault with Wireshark is tough, but for the enterprise user the glaring issue is the lack of formal documentation and support. ... Wireshark is the defacto standard for open source network analysis." —Jack Wallen, (August 17, 2009, 12:43 AM PST)
"I can tell you, it's not only free, it's does so much more than most of the competition. ...keeping one step ahead of (or at least on the same page as) the bad guys by using analysis tools like Wireshark gives you that much more of an edge in keeping your network secure as well as running at top efficiency." —Samara Lynn, (February 18, 2010)
"There is no denial that Wireshark features an impressive amount of features, all of them aimed at power users. is a complex and very capable analyzer, comparable and, in some cases, better than paid solutions." —Ionut Ilascu, (January 23rd, 2014 21:21 GMT)
Wireshark solves the problem of being able to analyze network traffic on any size network. Wireshark does this with the power often found in more costly tools, but for free.
   So any IT department in need of a powerful network analyzer, but without the budget to purchase such power, can turn to Wireshark and miss nary a feature.

Size: 161 MB (169,836,544 bytes) Packed Size: 44.2 MB (46,379,008 bytes)
MD5: CFE170B9F6EF5A06A62CE90F3E59BCD3

Size: 343 MB (359,723,008 bytes) Packed Size: 84.1 MB (88,276,992 bytes)
MD5: 26FA67102459442F84DC7E29A4601B53

More releases...

Wireshark portable for Windows 2003/NT 32/64 bit Wireshark for Windows 2003/NT 32/64 bit — Legacy Release

Wireshark portable build for Windows 2003 Server/NT 5.2 WiresharkPortable_1.12.13_32_64_bit_rev_1_Win2003_NT_5.2.paf
Size: 199 MB (209,248,256 bytes) Packed Size: 42.9 MB (45,043,712 bytes)
MD5: 36E1F3E7E935595E9613DA4EE443A075

Wireshark portable for Windows XP 32/64 bit Wireshark for Windows XP 32/64 bit — Legacy Release

Size: 204 MB (214,597,632 bytes) Packed Size: 39.8 MB (41,811,968 bytes)
MD5: 55EE76C3F3890406720667EA658D5086

Release Details

Developer: Gerald Combs, The Wireshark team, Wireshark Foundation, Riverbed Technology &
Requirements: Windows XP, 7 or later (read more below...)
License: Open source—GNU GPLv2
Source: Included in the package (.ini files)


  • WinPcap or NPcap, included for Windows XP and up (NDIS 5.x driver model) and Windows 7 and up—including Windows 10 (NDIS 6.x driver model),
  • USBPcap. USBPcap requires Security Update for Windows 7 (KB3033929), get it online: 32-bit or 64-bit.
  • More in the help file...

DIY/Do It Yourself: Upgrade to the Latest Release

Requirements 7-Zip, NPP/Notepad++ or other text editor, Launcher Generator/PAL, Installer/PAI.

  1. We'll use the 32/64 bit edition as example, you can infer from this example to upgrade the 32 bit only edition.
  2. Get the latest portable app. template, and extract the content with 7-Zip.
  3. Get the latest Wireshark release—the 32 and/or 64 bit installer.
  4. Put it in the same folder as the extracted template, in our example C:\0TEST, then extract the 32 bit installer with 7-Zip to WiresharkPortable _3264\App\Wireshark folder, Extract files
    Into App\Wireshark
    click Auto Rename when asked, Auto Rename
  5. Do the same with the 64 bit installer but now to App\Wireshark64 folder.
  6. Browse into App\Wireshark and App\Wireshark64 folder, delete:
    1. $PLUGINSDIR folder,
    2. uninstall.exe, vcredist_x86.exe, vcredist_x64.exe files.
  7. Move USBPcapSetup-[version].exe and WinPcap/npcap-[version].exe to App\Installers.
    Both pair in 32 and 64 bit are the same, so you can move the pair in 32 bit and delete the other pair in the 64 bit folder or vice versa.
    In the Installers folder, rename them to USBPcapSetup.exe and WinPcap/npcap.exe, Rename installers
  8. Browse to WiresharkPortable _3264\App\AppInfo and open appinfo.ini file with NPP. Replace the [Version] section with the latest version number. Make sure the PackageVersion entry is in 4 place digit, eg. not just 2.4.4, Update version
  9. Run PAL, paste the template folder address C:\0TEST\WiresharkPortable _3264, and click Go—a new launcher will be created, Create new launcher
  10. Test the new launchers by following this guide.
  11. When all is OK, then delete the WiresharkPortable _3264\Data folder and run PAI, paste the package folder address C:\0TEST\WiresharkPortable _3264, and click Go—to create the installer package. Create installer
  12. Use the installer package to upgrade your portable application. Don't forget to at least backup your Data folder before any upgrade :)
  13. If you find any changes that's not handled by the launcher, consult the PAL help file to modify the launcher yourself or ask for our paid upgrade support.

Portability Notes

  • Wireshark stores some settings in Windows registry and writes non essential data to Windows registry and data folders while running.
  • Make sure it exits cleanly before plugging out your thumbdrive.

About the Publisher

Troubleshooting with Wireshark
By Laura Chappell Wireshark portable, Preferences > Appearance Wireshark portable, Preferences > Advanced Wireshark portable, About > Folders
Motivate Wireshark development, follow them around the Web!