ClearSight Analyzer vs Wireshark comparison

"What ClearSight will do is it actually maps out the conversation for you."

"I can save the traffic and analysis when I want to. Also, it's especially helpful to follow the stream (TCP, UDP, etc.)."

"I like the filtering feature as we can filter data easily. This feature is also available in tcpdump, but it's a simple piece of software. Wireshark is more advanced and has many features. It allows you to filter a lot of things. The output can be filtered easily. The most important feature is colorization. If I say, "Okay, this particular SMB protocol in red, it will show me red." It's easy to identify that protocol or capture data."

"It helps in analyzing if something looks suspicious, such as a brute force attack or scanning from somewhere."

"Being able to dissect email data and figure out what is inside email messages was the most valuable feature. Such a feature is pretty helpful for an ongoing forensic investigation or when there is a potential insider threat that you are trying to investigate. It allows you to see the network activity of the users you are investigating. It also gives you more visibility into your network. It was very easy to set up. There is a lot of information out there on Google and YouTube about how to use it. There is also community support. If you have any trouble, it is pretty easy to find an answer online. You will have to do some digging only if you have a very specific use case."

"I find Wireshark a very useful tool. Its best feature is that it allows me to deeply understand what's going on at the packet level, as well as any adverse signatures that I can analyze. When I need to create an IPS rule, I need to check the traffic deeply to get more insights about the actual traffic, what's the name of certain flags, etc., and I'm able to do all that through Wireshark. The tool is also user-friendly."

"I use the filters very often, to determine what type of traffic I am looking for. The use of filter allows traffic to be segmented so that a value can be looked at individually apart from the other traffic."

"It is a stable product. I would rate the stability a ten out of ten."

"It has a good syntax to put the commands in and get information out of."

"I would like to see a multi-user version where you can have a launch platform and, potentially, instead of buying six licenses you buy 12 seats or something like that."

"Wireshark could make the filtering rules easier to apply and offer a drag-and-drop option as opposed to type and text."

"The only thing that I don't like is sometimes there is an update, and something that I was using is either no longer there or it has changed."

"The solution’s user interface could be improved."

"A room for improvement in Wireshark is its ease of use for beginners. It could be better. Another room for improvement in the tool is for it to provide more details about the traffic load. At the moment, Wireshark is adequate for me, so there isn't anything I'd like added to it in its next version."

"The speed of the Internet could be improved, especially its performance."

"We'd like to be able to extract the output into an Excel table."

"Wireshark gets stuck when it is a larger file."

"Wireshark could be improved by adding more monitoring features."

"It was pretty modest because you could get it in different ways. I think the six licenses, at that time, were about $1,000 each. But then again, I work for a school and educators tend to get discounts on things. So maybe it cost us about five or six hundred a copy."

"This is an open-source product that can be used free of charge."

"Wireshark is free of charge, and there's no license involved."

"It's a stand-alone tool. If there is a commercial license for it I am unaware of it."

"It is free to download and install. It runs on multiple platforms, so how can you go wrong?"

"The solution is open source so is free."

"Wireshark is free software, so you don't have to pay any licensing fee. Individual people can use it and then donate to Wireshark."

"We are using a freeware version of this solution, so there are no licence costs involved."

"Wireshark is an open-source product, so it's free to use."