This is our old Q&A Site. Please post any new questions and answers at

what is difference between wireshark and wireshark legacy?

asked 13 Nov '16, 06:23

krishnabhunia's gravatar image

accept rate: 0%

"Wireshark" uses the new QT based GUI, while "Wireshark Legacy" uses the old GTK based GUI. So the GUIs are the difference, and the new GUI may provide new/different features than the old. The internals should still be the same, meaning protocol dissectors and analysis results should be identical (but some core developers may correct me on this)

permanent link

answered 13 Nov '16, 06:30

Jasper's gravatar image

Jasper ♦♦
accept rate: 18%

...and, due to differences between the two toolkits and the fact that they provide Wireshark with the user inteface in general, not just the graphical part of it, some functions which depend on more sophisticated features like drawing graphics and playing audio behave different in the two versions. For example, the telephony flow graph in the Qt version (Wireshark) does not draw fat lines for RTP and narrow ones for signalling (which the GTK version/Wireshark legacy did), the RTP player in the Qt version struggles on some soundcards...

(13 Nov '16, 06:43) sindy

@sindy, are there bugs filed for the issues you mentioned (and any other issues you've found)?

(13 Nov '16, 12:17) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 13 Nov '16, 06:23

question was seen: 14,783 times

last updated: 13 Nov '16, 12:17

p​o​w​e​r​e​d by O​S​Q​A