The world`s foremost network protocol analyzer for Mac

Wireshark for Mac

Wireshark 4.6.4

  -  135 MB  -  Open Source

Sometimes latest versions of the software can cause issues when installed on older devices or devices running an older version of the operating system.

Software makers usually fix these issues but it can take them some time. What you can do in the meantime is to download and install an older version of Wireshark 4.6.4.


For those interested in downloading the most recent release of Wireshark for Mac or reading our review, simply click here.


All old versions distributed on our website are completely virus-free and available for download at no cost.


We would love to hear from you

If you have any questions or ideas that you want to share with us - head over to our Contact page and let us know. We value your feedback!

Why is this app published on FileHorse? (More info)
  • Wireshark 4.6.4 Screenshots

    The images below have been resized. Click on them to view the screenshots in full size.

    Wireshark 4.6.4 Screenshot 1
  • Wireshark 4.6.4 Screenshot 2
  • Wireshark 4.6.4 Screenshot 3
  • Wireshark 4.6.4 Screenshot 4

What's new in this version:

Fixed:
- wnpa-sec-2026-05 USB HID dissector memory exhaustion
- wnpa-sec-2026-06 NTS-KE dissector crash
- wnpa-sec-2026-07 RF4CE Profile dissector crash

The following bugs have been fixed:
- Wireshark doesn’t start if Npcap is configured with "Restrict Npcap driver’s Access to Administrators only"
- PQC signature algorithm not reported in signature_algorithms
- Unexpected JA4 ALPN values when space characters sent
- Expert Info seems to have quadratic performance (gets slower and slower) Issue 20970.
- IKEv2 EMERGENCY_CALL_NUMBERS Notify payload cannot be decoded
- TShark and editcap fails with segmentation fault when output format (-F) set to blf
- Fuzz job crash: fuzz-2026-02-01-12944805400.pcap [Zigbee Direct Tunneling Zigbee NWK PDUs NULL hash table] Issue 20977.
- Wiretap writes pcapng custom options with string values invalidly
- RDM status in Output Status (GoodOutputB) field incorrectly decoded in Art-Net PollReply dissector
- Wiretap writes invalid pcapng Darwin option blocks
- TDS dissector desynchronizes on RPC DATENTYPE (0x28) due to incorrect expectation of TYPE_VARLEN (MaxLen) Issue 21001
- Only first HTTP POST is parsed inside SOCKS with "Decode As"
- TShark: Bogus "Dissector bug" messages generated in pipelines where something after tshark exits before reading all its input
- New Diameter RAT-Types in TS 29.212 not decoded
- Malformed packet error on Trigger HE Basic frames

Updated Protocol Support:
- Art-Net, AT, BGP, GSM DTAP, GSM SIM, IEEE 802.11, IPv6, ISAKMP, MBIM, MySQL, NAS-5GS, NTS-KE, SGP.22, Silabs DCH, Socks, TDS, TECMP, USB HID, ZB TLV, and ZBD

New and Updated Capture File Support:
- BLF, pcapng, and TTL