Stratoshark lets you explore and analyze applications at the system call level using a mature, proven interface based on Wireshark.
Stratoshark lets you explore and analyze applications at the system call level using a mature, proven interface based on Wireshark. Stratoshark lets you explore and investigate the application-level behavior of your systems. You can capture system call and log activity and use a variety of advanced features to troubleshoot and analyze that activity.
What’s New
The following changes have been made since version 0.10.2:
- The minimum supported Windows version is Windows 10 21H2 (build 19044) or Windows Server 2022.
- Extcap interfaces now support “bookmarks,” which let you have multiple configurations for the same interfaces. Extcap configurations are now shared across profiles, and existing per-profile configurations will be migrated to bookmarks. Issue 14224.
- An issue which prevented loading .scap files generated by Falco or the sysdig CLI utility has been fixed.
The following changes have been made since version 0.10.1:
- Timestamps missing in Stratoshark in 0.10.0 and 0.10.1. Issue 21406.
The following changes have been made since version 0.10.0:
The Stratoshark Windows installer now includes a DLL that was required by the cloudtrail and gcpaudit plugins.
The following issues have been fixed: * Wireshark appears in German where Systemlanguage is Dutch. Issue 20347. * If you double-click an interface in the welcome screen interface list, and have typed nothing in the capture filter box, the system reports an invalid capture filter. Issue 21303. * Qt: Appearance mode is stored per-profile while theme name is global — theme flips on profile switch. Issue 21311. * Qt: ‘Recent filters’ arrow button gives no hover/pressed feedback. Issue 21322. * Qt: Hidden interfaces (Welcome page right-click) not persisted across profile switch or restart. Issue 21325. * Qt: Preferences dialog left category tree cannot be resized (labels truncated, only horizontal scrollbar) Issue 21327. * Stratoshark: no-libpcap compilation broken (actionCaptureRestart) — fix from 554baf6294 never applied. Issue 21328. * Qt: Make theme preview resemble a real Wireshark window (mini packet-list mockup) Issue 21329. * stratoshark -D lists a bunch of network capture devices. Issue 21332.
The following changes have been made since version 0.9.3:
- Stratoshark can now read Process Monitor (Procmon) files.
- Welcome Page Redesign The welcome page has been redesigned to be more informative and easier to navigate. It now highlights the learning sections better and includes a new sidebar with tips and tricks for using Wireshark effectively. The welcome page is now also more accessible, with improved keyboard navigation and screen reader support.
- Lua Debugger A built-in Lua script debugger has been added. It supports breakpoints, single-stepping, variable inspection, expression evaluation, and stack traces. …
| Publisher | Stratoshark Development Team |
|---|---|
| Author | The Wireshark Foundation |
| Version | 0.10.3 |
| Release date | 2026-09-02 |
| License | GPL-2.0-or-later |
| Installer type | nullsoft |
| Architecture | x64, arm64 |
| Package ID | WiresharkFoundation.Stratoshark |
| Install scope | All users |
winget install --id=WiresharkFoundation.Stratoshark -ewinget upgrade --id=WiresharkFoundation.Stratoshark -ewinget uninstall --id=WiresharkFoundation.Stratoshark -e"Stratoshark-0.10.3-x64.exe" /SWhat’s New
The following changes have been made since version 0.10.1:
- Timestamps missing in Stratoshark in 0.10.0 and 0.10.1. Issue 21406.
The following changes have been made since version 0.10.0:
- The Stratoshark Windows installer now includes a DLL that was required by the cloudtrail and gcpaudit plugins.
- Wireshark appears in German where Systemlanguage is Dutch. Issue 20347.
- If you double-click an interface in the welcome screen interface list, and have typed nothing in the capture filter box, the system reports an invalid capture filter. Issue 21303.
- Qt: Appearance mode is stored per-profile while theme name is global — theme flips on profile switch. Issue 21311.
- Qt: ‘Recent filters’ arrow button gives no hover/pressed feedback. Issue 21322.
- Qt: Hidden interfaces (Welcome page right-click) not persisted across profile switch or restart. Issue 21325.
- Qt: Preferences dialog left category tree cannot be resized (labels truncated, only horizontal scrollbar). Issue 21327.
- Stratoshark: no‑libpcap compilation broken (actionCaptureRestart) — fix from 554baf6294 never applied. Issue 21328.
- Qt: Make theme preview resemble a real Wireshark window (mini packet‑list mockup). Issue 21329.
- stratoshark -D lists a bunch of network capture devices. Issue 21332.
The following changes have been made since version 0.9.3:
- Stratoshark can now read Process Monitor (Procmon) files. …
This is an experimental release intended to test new features for Stratoshark 1.0.
What is Stratoshark?
Stratoshark is a system call and log analyzer. It combines the analysis and filtering features of Wireshark with the capture and data enrichment features of Falco. It can be used for troubleshooting, analysis, development and education.
Stratoshark is hosted by the Wireshark Foundation, a nonprofit which promotes protocol and system analysis education. Stratoshark and the foundation depend on your contributions in order to do their work. If you or your organization would like to contribute or become a sponsor, please visit wiresharkfoundation.org.
What’s New
The following changes have been made since version 0.10.0:
- The Stratoshark Windows installer now includes a DLL that was required by the cloudtrail and gcpaudit plugins.
- The following issues have been fixed:
* Wireshark appears in German where Systemlanguage is Dutch. Issue 20347.
* If you double-click an interface in the welcome screen interface list, and have typed nothing in the capture filter box, the system reports an invalid capture filter. Issue 21303.
* Qt: Appearance mode is stored per-profile while theme name is global — theme flips on profile switch. Issue 21311.
* Qt: ‘Recent filters’ arrow button gives no hover/pressed feedback. Issue 21322.
* Qt: Hidden interfaces (Welcome page right-click) not persisted across profile switch or restart. Issue 21325. …
Yes. Stratoshark is free and open-source software released under the GPL-2.0-or-later license.
The latest version is 0.10.3, released on Sep 2, 2026.
The download button links to the official installer published on 1.na.dl.wireshark.org, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with d044ef8ece8b2cd8e265e577345d6cc656cabee5c2f1866fef83f370147df88b.
Stratoshark runs on Windows and is available for 64-bit (x64), ARM64 systems.
Run the offline installer with "Stratoshark-0.10.3-x64.exe" /S, or install it with Windows Package Manager: winget install --id=WiresharkFoundation.Stratoshark -e --silent.
Open Settings › Apps › Installed apps, find Stratoshark and select Uninstall. From the command line, run winget uninstall --id=WiresharkFoundation.Stratoshark -e.
Other Networking programs for Windows from different developers.
A simple tool for discovering network devices
A TCP, UDP, and SCTP network bandwidth measurement tool.
Fast, Modern, Secure VPN Tunnel
The definitive way to test the speed and performance of your internet connection.
The best manual tools to start web security testing.
A platform for building proxies to bypass network restrictions.