Table of Contents
Wireshark can be "logically" separated into the backend (dissecting of protocols, file load/save, capturing, ...) and the frontend (the user interface). However, there's currently no clear separation between these two parts (no clear API definition), but this might change in the future.
The following frontends are currently maintained by the Wireshark development team:
Wireshark, GTK 2.x based
TShark, console based
Wireshark, GTK 1.x based (was removed with the Wireshark 1.2.0 release)
There exist other Wireshark frontends, not developed nor maintained by the Wireshark development team:
Packetyzer (Win32 native interface, written in Delphi and released under the GPL, see: http://www.paglo.com/opensource/packetyzer)
hethereal (web based frontend, not actively maintained and not finished)
This chapter is focused on the Wireshark frontend, and especially on the GTK specific things.