- [Instructor] In the late 1990s Gerald Combs needed a way
to analyze network problems.
Portable sniffers were available at the time,
but they were costly.
Gerald developed Ethereal with the help of some friends
and later it became Wireshark.
Wireshark Legacy has been around for over 10 years.
Wireshark Legacy features the GTK interface.
GTK, or GIMP Toolkit, is a multiplatform toolkit
to create graphical user interfaces.
GTK had a huge impact on the look and feel of Wireshark
but doesn't really cover all supporting operating systems
as it's more related to the Unix Linux environment.
In 2015 Wireshark 2.0 was released.
Wireshark 2.0 featured the QT framework.
The QT Framework is more Windows friendly
and performs well on most operating systems,
Windows, MacOS and Linux.
In addition to the new interface
there are many benefits.
Benefits that include enhanced graphs,
flow graphs and IO graphs are easier to use.
You can easily add columns, you simply right click
and say apply as a column.
Coloring rules are easier to create and edit.
You can visualize related packets.
Depending on where you click, you'll be able
to see the related packets in the stream.
There is an intelligent scrollbar on the right
with coloring so you can quickly go to trouble spots.
And Wireshark now translates in several different languages.
We're all familiar with Legacy Wireshark.
You can still use the Legacy version
but support for Legacy is ending.
It's now time to embrace Wireshark Next Generation.