Portable Wireshark 1.2.0 Stable

Major Features:

1. Deep inspection of hundreds of protocols, with more being added all the time
2. Live capture and offline analysis
3. Standard three-pane packet browser
4. Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
5. Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility
6. The most powerful display filters in the industry
7. Rich VoIP analysis
8. Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others
9. Capture files compressed with gzip can be decompressed on the fly
10. Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platfrom)
11. Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2
12. Coloring rules can be applied to the packet list for quick, intuitive analysis
13. Output can be exported to XML, PostScript®, CSV, or plain text
14. Data can be captured "off the wire" from a live network connection, or read from a capture file.
15. Capture files can be programmatically edited or converted via command-line switches to the "editcap" program.
16. 602 protocols can currently be dissected
17. Data display can be refined using a display filter.
18. Display filters can also be used to selectively highlight and color packet summary information.
19. All or part of each captured network trace can be saved to disk.

Enhancements: 

• Bug Fixes:
• • Type-ahead search now works properly.
  • Several bugs that affected capture from pipes have been fixed.
  • Many Lua-related bugs have been fixed.
  • Several memory leaks have been found and fixed.
  • The "Follow TCP Stream" feature could show two streams at the same time The hex dump view has been narrowed.
  • WPA and SSL decryption bugs have been fixed.
  • Readability problems on 256-color displays on Windows have been fixed.
• New and Updated Features:
• • Wireshark has a spiffy new start page.
  • Display filters now autocomplete.
  • A 64-bit Windows (x64) installer is now provided.
  • Support for the c-ares resolver library has been added. It has many advantages over ADNS.
  • Many new protocol dissectors and capture file formats have been added (see below for a complete list).
  • Macintosh OS X support has been improved.
  • GeoIP database lookups.
  • OpenStreetMap + GeoIP integration.
  • Improved Postscript print output.
  • The preference handling code is now much smarter about change.
  • Support for Pcap-ng, the next-generation capture file format.
    
  • Support for process information correlation via IPFIX.
    
  • Column widths are now saved.
    
  • The last used configuration profile is now saved.
    
  • Protocol preferences are changeable from the packet details context menu
    
  • Support for IP packet comparison.
    
  • Capinfos now shows the average packet rate.
    
  • GTK1 is no longer supported. (Yes, this is a feature.)
    
  • Official Windows packages are now built using Microsoft Visual C++ 2008 SP1.
    

Requirements:

• Windows Installer (32-bit)
• Windows Installer (64-bit)
• Windows U3 (32-bit)
• Windows PortableApps (32-bit)
• OS X 10.5 (Leopard) Intel .dmg
• OS X 10.5 (Leopard) PPC .dmg
• Source Code.