Aquí hi ha 4 versions de Stratoshark, des de 17 de setembre del 2025 fins a l’actual, 0.10.3. Cadascuna enllaça amb els instal·ladors del mateix desenvolupador.
| Versió | Data | Mida | Fitxers |
|---|---|---|---|
| 0.10.3Darrera versió | 2 de setembre del 2026 | 88,4 MB | 64 bits EXE (NSIS) 88,4 MBARM64 EXE (NSIS) 72,5 MB Notes de la versióWhat’s New
The following changes have been made since version 0.10.2:
- The minimum supported Windows version is Windows 10 21H2 (build 19044) or Windows Server 2022.
- Extcap interfaces now support “bookmarks,” which let you have multiple configurations for the same interfaces. Extcap configurations are now shared across profiles, and existing per-profile configurations will be migrated to bookmarks. Issue 14224.
- An issue which prevented loading .scap files generated by Falco or the sysdig CLI utility has been fixed.
The following changes have been made since version 0.10.1:
- Timestamps missing in Stratoshark in 0.10.0 and 0.10.1. Issue 21406.
The following changes have been made since version 0.10.0:
The Stratoshark Windows installer now includes a DLL that was required by the cloudtrail and gcpaudit plugins.
The following issues have been fixed: * Wireshark appears in German where Systemlanguage is Dutch. Issue 20347. * If you double-click an interface in the welcome screen interface list, and have typed nothing in the capture filter box, the system reports an invalid capture filter. Issue 21303. * Qt: Appearance mode is stored per-profile while theme name is global — theme flips on profile switch. Issue 21311. * Qt: ‘Recent filters’ arrow button gives no hover/pressed feedback. Issue 21322. * Qt: Hidden interfaces (Welcome page right-click) not persisted across profile switch or restart. Issue 21325. * Qt: Preferences dialog left category tree cannot be resized (labels truncated, only horizontal scrollbar) Issue 21327. * Stratoshark: no-libpcap compilation broken (actionCaptureRestart) — fix from 554baf6294 never applied. Issue 21328. * Qt: Make theme preview resemble a real Wireshark window (mini packet-list mockup) Issue 21329. * stratoshark -D lists a bunch of network capture devices. Issue 21332.
The following changes have been made since version 0.9.3:
- Stratoshark can now read Process Monitor (Procmon) files.
- Welcome Page Redesign The welcome page has been redesigned to be more informative and easier to navigate. It now highlights the learning sections better and includes a new sidebar with tips and tricks for using Wireshark effectively. The welcome page is now also more accessible, with improved keyboard navigation and screen reader support.
- Lua Debugger A built-in Lua script debugger has been added. It supports breakpoints, single-stepping, variable inspection, expression evaluation, and stack traces.
- Themes Stratoshark now uses the same theme system as Wireshark, driving the colors used throughout the GUI from a single theme instead of many individual color preferences. The renamed Appearance › Theme and Font preferences page lets you pick a theme, switch between Light, Dark, and System appearance, set the packet pane font, and preview the result. A built-in default theme ships with Stratoshark, and additional themes can be installed as JSONC (JSON with Comments) files. The previous per-color settings (marked and ignored packets, “Follow Stream” client and server text, display filter validity, and the selected packet) are now provided by the active theme. Personal themes can now be dropped as single .jsonc files into $HOME/.local/lib/stratoshark/themes (Unix) or %APPDATA%\Stratoshark\themes (Windows); the filename becomes the theme’s name in the dropdown. The exact path is shown in the About dialog’s Folders tab. On first launch after the upgrade, Stratoshark checks the Default profile’s preferences for customized values of the removed per-color settings. If any are found, a personal theme named Personal (Migrated) is created automatically in the personal themes directory, the legacy keys are removed from the Default profile’s preferences file, and the theme is activated so the original visual customizations are preserved. The migration runs once: the generated personal.jsonc can be edited, renamed, or deleted by hand at any time. The welcome page section headers (“Open”, “Capture”, “Learn”) and the fil |
| 0.10.2 | 15 de juliol del 2026 | — | 64 bits EXE (NSIS)ARM64 EXE (NSIS) Notes de la versióWhat’s New
The following changes have been made since version 0.10.1:
- Timestamps missing in Stratoshark in 0.10.0 and 0.10.1. Issue 21406.
The following changes have been made since version 0.10.0:
- The Stratoshark Windows installer now includes a DLL that was required by the cloudtrail and gcpaudit plugins.
- Wireshark appears in German where Systemlanguage is Dutch. Issue 20347.
- If you double-click an interface in the welcome screen interface list, and have typed nothing in the capture filter box, the system reports an invalid capture filter. Issue 21303.
- Qt: Appearance mode is stored per-profile while theme name is global — theme flips on profile switch. Issue 21311.
- Qt: ‘Recent filters’ arrow button gives no hover/pressed feedback. Issue 21322.
- Qt: Hidden interfaces (Welcome page right-click) not persisted across profile switch or restart. Issue 21325.
- Qt: Preferences dialog left category tree cannot be resized (labels truncated, only horizontal scrollbar). Issue 21327.
- Stratoshark: no‑libpcap compilation broken (actionCaptureRestart) — fix from 554baf6294 never applied. Issue 21328.
- Qt: Make theme preview resemble a real Wireshark window (mini packet‑list mockup). Issue 21329.
- stratoshark -D lists a bunch of network capture devices. Issue 21332.
The following changes have been made since version 0.9.3:
- Stratoshark can now read Process Monitor (Procmon) files.
- Welcome Page Redesign: the welcome page has been redesigned to be more informative and easier to navigate, with a new sidebar, improved keyboard navigation and screen reader support.
- Lua Debugger: a built‑in Lua script debugger with breakpoints, single‑stepping, variable inspection, expression evaluation, and stack traces.
- Themes: Stratoshark now uses the same theme system as Wireshark, with Appearance › Theme and Font preferences, Light/Dark/System appearance, and support for JSONC theme files. Personal themes are migrated automatically.
- Zooming (View › Zoom In / View › Zoom Out) now scales the whole window, including capture and display filter fields.
- Keyboard shortcuts dialog moved to View → Internals → Keyboard Shortcuts with a print button.
- Application icon updated to support Liquid Glass on macOS Tahoe.
- Stratoshark and strato can now read plain Kubernetes Audit logs, Google Cloud Audit logs, and CloudTrail logs.
- CloudTrail and Google Cloud Audit log plugins translated to Rust on macOS and Windows. Issue 20869.
The following changes have been made since version 0.9.2:
- Windows installers now ship with Qt 6.8.3 (previously 6.8.1).
- Stratoshark now ships with “strato”, a command line tool similar to tshark.
- Windows and macOS packages now ship with the gcpaudit and k8saudit plugins.
- Falco Events dissector adds IP geolocation fields alongside IPv4 and IPv6 address fields.
The following changes have been made since version 0.9.1:
- New “Plots” dialog provides scatter plots; “I/O Graphs” provides histograms.
- Falco Bridge dissector renamed to Falco Events; “falcoevents” protocol prefix added with “falcobridge” alias for backward compatibility. Issue 20397.
- Stratoshark can now show field offsets for supported plugins.
- Cloudtrail log messages can now be viewed as formatted JSON data.
- System call dissector adds “falcoevents.fd.stream” field for unique file descriptor numbers; “Follow File Descriptor Stream” uses this field. Issue 20538.
- Universal macOS installers shipped instead of separate Arm64 and Intel packages. Issue 17294.
The following changes have been made since version 0.9.0:
- Application icons have been updated.
Bug Fixes
The following bugs have been fixed since version 0.9.3:
- Interfaces hidden from the welcome page are now remembered across profile switches and restarts. Issue 21325.
The following bugs have been fixed since version 0.9.2:
- .scap file extension wrongly associated with Wireshark. Issue 20583.
- sshdig should have a snaplen option. Issue 20586.
The following bugs have been fixed since vers |
| 0.10.1 | 10 de juny del 2026 | — | 64 bits EXE (NSIS)ARM64 EXE (NSIS) Notes de la versióThis is an experimental release intended to test new features for Stratoshark 1.0.
What is Stratoshark?
Stratoshark is a system call and log analyzer. It combines the analysis and filtering features of Wireshark with the capture and data enrichment features of Falco. It can be used for troubleshooting, analysis, development and education.
Stratoshark is hosted by the Wireshark Foundation, a nonprofit which promotes protocol and system analysis education. Stratoshark and the foundation depend on your contributions in order to do their work. If you or your organization would like to contribute or become a sponsor, please visit wiresharkfoundation.org.
What’s New
The following changes have been made since version 0.10.0:
- The Stratoshark Windows installer now includes a DLL that was required by the cloudtrail and gcpaudit plugins.
- The following issues have been fixed:
* Wireshark appears in German where Systemlanguage is Dutch. Issue 20347.
* If you double-click an interface in the welcome screen interface list, and have typed nothing in the capture filter box, the system reports an invalid capture filter. Issue 21303.
* Qt: Appearance mode is stored per-profile while theme name is global — theme flips on profile switch. Issue 21311.
* Qt: ‘Recent filters’ arrow button gives no hover/pressed feedback. Issue 21322.
* Qt: Hidden interfaces (Welcome page right-click) not persisted across profile switch or restart. Issue 21325.
* Qt: Preferences dialog left category tree cannot be resized (labels truncated, only horizontal scrollbar) Issue 21327.
* Stratoshark: no-libpcap compilation broken (actionCaptureRestart) — fix from 554baf6294 never applied. Issue 21328.
* Qt: Make theme preview resemble a real Wireshark window (mini packet-list mockup) Issue 21329.
* stratoshark -D lists a bunch of network capture devices. Issue 21332.
The following changes have been made since version 0.9.3:
- Stratoshark can now read Process Monitor (Procmon) files.
- Welcome Page Redesign: The welcome page has been redesigned to be more informative and easier to navigate. It now highlights the learning sections better and includes a new sidebar with tips and tricks for using Wireshark effectively. The welcome page is now also more accessible, with improved keyboard navigation and screen reader support.
- Lua Debugger: A built-in Lua script debugger has been added. It supports breakpoints, single-stepping, variable inspection, expression evaluation, and stack traces.
- Themes: Stratoshark now uses the same theme system as Wireshark, driving the colors used throughout the GUI from a single theme instead of many individual color preferences. The renamed Appearance › Theme and Font preferences page lets you pick a theme, switch between Light, Dark, and System appearance, set the packet pane font, and preview the result. A built-in default theme ships with Stratoshark, and additional themes can be installed as JSONC (JSON with Comments) files. The previous per-color settings are now provided by the active theme. Personal themes can be dropped as single .jsonc files into $HOME/.local/lib/stratoshark/themes (Unix) or %APPDATA%\Stratoshark\themes (Windows); the filename becomes the theme’s name in the dropdown. On first launch after the upgrade, Stratoshark checks the Default profile’s preferences for customized values of the removed per-color settings. If any are found, a personal theme named Personal (Migrated) is created automatically, the legacy keys are removed, and the theme is activated so the original visual customizations are preserved.
- Zooming (View › Zoom In / View › Zoom Out) now scales the whole window, including the capture and display filter fields and other window elements.
- The keyboard shortcuts dialog has been moved to View → Internals → Keyboard Shortcuts and now has a button to print the list of keyboard shortcuts to an HTML file.
- The application icon has been updated to support Liquid Glass on macOS Tahoe.
- Stratoshark and strato |
| 0.9.3 | 17 de setembre del 2025 | — | 64 bits EXE (NSIS)ARM64 EXE (NSIS) |