
Wireshark's installer for Windows should probably add the installation directory for Wireshark to the user's Path. Once you've added that directory to your Path, then, if you open a "Command prompt" window, you can run TShark as the tshark command. It is among the most popular network protocol analyzers. It can do live captures and offline analysis, VoIP analysis, and protocol decryption.


Supported protocols are still growing, the number going by the hundreds. The article is about Windows 7, but, for the benefit of others reading this question, the way you do it on Windows XP is exactly the same, so it's probably exactly the same on Windows Vista (and perhaps even on Windows 2000). Wireshark is a network protocol analyzer that has become a standard across several industries. Change Path so that the directory in which Wireshark is installed is one of the directories in it (Path is a semicolon-separated list of directories). If you click that button, it pops up a window that lets you edit your environment variables there will probably be one called "Path" in your user variables (as opposed to the "System variables"). Make sure that the directory in which Wireshark is installed - by default, it'd be C:\\Program Files\\Wireshark, or whatever "Program Files" is translated to in your version of Windows - is in your command search path.Īs indicated by this article, if you open a Properties window for My Computer, and select the Advanced tab, there's an "Environment Variables" button.
