The net/wireshark port

wireshark-4.4.2 – graphical network protocol analyzer, Qt user-interface (cvsweb github mirror)

Description

Wireshark is a network capture tool and protocol analyzer, including
decoders for very many common and less-common protocols.

This package contains the main program providing the graphical user
interface; other parts are in the tshark package which may be installed
separately if using the software on a system without X.

WWW: https://www.wireshark.org/

Readme

+-----------------------------------------------------------------------
| Running ${PKGSTEM} on OpenBSD
+-----------------------------------------------------------------------

Packet dissectors (here in Wireshark, and in other programs such as tcpdump)
have a long history of security problems. In Wireshark, these are isolated
from the packet capture code (which must have root privileges) by using a
separate program, dumpcap, to run the capture.

${TRUEPREFIX}/bin/dumpcap has been installed setuid root, with read/execute
access granted only to users in the _wireshark group. For normal interactive
use of Wireshark, add your username to this group:

  usermod -G _wireshark username

If you will only run Wireshark offline on files captured using tcpdump -w,
this step is not necessary.

DO NOT RUN WIRESHARK AS ROOT!