what is difference between wireshark and wireshark legacy? asked 13 Nov '16, 06:23  krishnabhunia |
One Answer:
"Wireshark" uses the new QT based GUI, while "Wireshark Legacy" uses the old GTK based GUI. So the GUIs are the difference, and the new GUI may provide new/different features than the old. The internals should still be the same, meaning protocol dissectors and analysis results should be identical (but some core developers may correct me on this) answered 13 Nov '16, 06:30  Jasper ♦♦ |
...and, due to differences between the two toolkits and the fact that they provide Wireshark with the user inteface in general, not just the graphical part of it, some functions which depend on more sophisticated features like drawing graphics and playing audio behave different in the two versions. For example, the telephony flow graph in the Qt version (Wireshark) does not draw fat lines for RTP and narrow ones for signalling (which the GTK version/Wireshark legacy did), the RTP player in the Qt version struggles on some soundcards...
@sindy, are there bugs filed for the issues you mentioned (and any other issues you've found)?