It works with UNIX and Windows in exactly the same way and it can be used with an active network connection. If you are or want to be a network engineer just learn how to use it. If you want to see if an Application or a computer or a switch, or the WiFi is failing this is the App that is going to give you a response. It is the software to debug network issues. You can capture traffic without needing to disconnect, Wireshark usually works where everything else fails. With Wireshark, you can also analyze and receive the traffic from the same computer or if you are navigating the internet. Wireshark is actually the best networking tool as a first tool for troubleshooting and learning or trying to break into a network. It is the last tool that you want to use and for a good reason, it’s just a fast program but harder to use than the alternatives. It has many features including Available for UNIX and Windows, Capture live packet data from a network interface, Open files containing packet data captured with WinDump and many other packet capture programs, Import packets from text files containing hex dumps of packet data, Display packets with very detailed protocol information, Save packet data captured, Export some or all packets in a number of capture file formats, Filter packets on many criteria, Search for packets on many criteria, Colorize packet display based on filters, Create various statistics and more. Download Setup Wireshark Portable Overview

Wireshark portable