Wireshark 4.4 launches with enhanced graphs, custom columns, and auto profile switching

Wireshark has launched version 4.4, introducing numerous enhancements to the widely-used open-source network protocol analyzer. Key updates include various bug fixes and performance improvements in graph dialogs such as I/O Graphs, Sequence Diagrams, and TCP Stream Graphs. For I/O Graphs, users can now enjoy a minimum interval of 1 microsecond, SI prefixes for the Y axis, and improved bar graph rendering. Additionally, the graph list can be reordered via drag-and-drop, and the legend can be relocated by right-clicking on it.

In the Sequence Diagram dialog, covering Flow Graphs and VoIP Calls, users can now export the entire graph as an image and see endpoints sharing the same address displayed correctly. TCP Stream Graphs have been enhanced to better identify client and server sides of connections. Custom columns now support arithmetic operations, raw byte display with the @ operator, and logical tests like tcp.port == 443. Other notable updates include extensive improvements to display filters and the Follow Stream dialog, which now features delta times and turns. Users can also add display filters to configuration profiles, allowing Wireshark to automatically switch profiles based on filter matches when opening capture files.