If you have problems or need help with Wireshark there are several places that may be of interest (besides this guide, of course).
You will find lots of useful information on the Wireshark homepage at https://www.wireshark.org/.
The Wireshark Wiki at https://gitlab.com/wireshark/wireshark/wikis/ provides a wide range of information related to Wireshark and packet capture in general. You will find a lot of information not part of this user’s guide. For example, it contains an explanation how to capture on a switched network, an ongoing effort to build a protocol reference, protocol-specific information, and much more.
And best of all, if you would like to contribute your knowledge on a specific topic (maybe a network protocol you know well), you can edit the wiki pages with your web browser.
The Wireshark Q&A site at https://ask.wireshark.org/ offers a resource where questions and answers come together. You can search for questions asked before and see what answers were given by people who knew about the issue. Answers are ranked, so you can easily pick out the best ones. If your question hasn’t been discussed before you can post one yourself.
The Frequently Asked Questions lists often asked questions and their corresponding answers.
![[Note]](wsug_graphics/note.svg) | Read the FAQ |
|---|---|
|
Before sending any mail to the mailing lists below, be sure to read the FAQ. It will often answer any questions you might have. This will save yourself and others a lot of time. Keep in mind that a lot of people are subscribed to the mailing lists. |
You will find the FAQ inside Wireshark by clicking the menu item Help/Contents and selecting the FAQ page in the dialog shown.
An online version is available at the Wireshark website at https://www.wireshark.org/faq.html. You might prefer this online version, as it’s typically more up to date and the HTML format is easier to use.
There are several mailing lists of specific Wireshark topics available:
- wireshark-announce
- Information about new program releases, which usually appear about every six weeks.
- wireshark-users
- Topics of interest to users of Wireshark. People typically post questions about using Wireshark and others (hopefully) provide answers.
- wireshark-dev
- Topics of interest to developers of Wireshark. If you want to develop a protocol dissector or update the user interface, join this list.
You can subscribe to each of these lists from the Wireshark web site: https://www.wireshark.org/lists/. From there, you can choose which mailing list you want to subscribe to by clicking on the Subscribe/Unsubscribe/Options button under the title of the relevant list. The links to the archives are included on that page as well.
![[Tip]](wsug_graphics/tip.svg) | The lists are archived |
|---|---|
|
You can search in the list archives to see if someone asked the same question some time before and maybe already got an answer. That way you don’t have to wait until someone answers your question. |
| Note |
|---|---|
|
Before reporting any problems, please make sure you have installed the latest version of Wireshark. |
When reporting problems with Wireshark please supply the following information:
- The version number of Wireshark and the dependent libraries linked with it, such as Qt or GLib. You can obtain this from Wireshark’s about box or the command wireshark -v.
- Information about the platform you run Wireshark on (Windows, Linux, etc. and 32-bit, 64-bit, etc.).
- A detailed description of your problem.
- If you get an error/warning message, copy the text of that message (and also a few lines before and after it, if there are some) so others may find the place where things go wrong. Please don’t give something like: “I get a warning while doing x” as this won’t give a good idea where to look.
![[Warning]](wsug_graphics/warning.svg) | Don’t send confidential information! |
|---|---|
|
If you send capture files to the mailing lists be sure they don’t contain any sensitive or confidential information like passwords or personally identifiable information (PII). In many cases you can use a tool like TraceWrangler to sanitize a capture file before sharing it. |
| Don’t send large files |
|---|---|
|
Do not send large files (> 1 MB) to the mailing lists. Instead, provide a download link. For bugs and feature requests, you can create an issue on Gitlab Issues and upload the file there. |
When reporting crashes with Wireshark it is helpful if you supply the traceback information along with the information mentioned in “Reporting Problems”.
You can obtain this traceback information with the following commands on UNIX or Linux (note the backticks):
$ gdb `whereis wireshark | cut -f2 -d: | cut -d' ' -f2` core >& backtrace.txt backtrace ^D
If you do not have gdb available, you will have to check out your operating system’s debugger.
Email backtrace.txt to wireshark-dev[AT]wireshark.org.
The Windows distributions don’t contain the symbol files (.pdb) because they are very large. You can download them separately at https://www.wireshark.org/download/win32/all-versions/ and https://www.wireshark.org/download/win64/all-versions/ .