Skip to content

Public Beta v.0.4.0

Choose a tag to compare

View all tags
@netwho netwho released this 01 Mar 17:50
· 157 commits to main since this release
v.0.4.0
5c6f6d5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

PacketCircle v.0.4.0

First release of the v0.4.x series — introducing Wi-Fi Monitoring Mode and Protocol Information Dialogs.

Note: This is an initial v0.4.x release with limited QA. The v.0.3.2 installer remains available as a fallback — both versions are included in the installer and can be selected during setup.

Installation

Installers for macOS (Universal Binary), Linux x86_64, and Windows x86_64 are available in the installer-v.0.4.x/ directory.

macOS

cd installer-v.0.4.x/macos-universal
chmod +x install.sh && ./install.sh

Linux

cd installer-v.0.4.x/linux-x86_64
chmod +x install.sh && ./install.sh

Windows

cd installer-v.0.4.x\windows-x86_64
.\install.ps1

All installers support version selection (v.0.4.0 or v.0.3.2), detect any existing installation, and offer an uninstall option.

Manual Install

Alternatively, copy the plugin file directly into your Wireshark personal plugins folder — no installer needed. To find the exact path on your system, open Wireshark → Help → About Wireshark → Folders tab and look for Personal Plugins.

Platform File
macOS installer-v.0.4.x/macos-universal/v.0.4.0/packetcircle.so
Linux installer-v.0.4.x/linux-x86_64/bin/v.0.4.0/packetcircle-ws4x.so
Windows installer-v.0.4.x\windows-x86_64\v.0.4.0\packetcircle.dll

Restart Wireshark after copying. The plugin appears under Tools → PacketCircle.

What's New in v0.4.0

Wi-Fi Monitoring Mode

Visualize 802.11 wireless communication with RSSI-based signal-quality color coding. Connection lines are colored by signal strength — green (Excellent), yellow (Good), orange (Fair), red (Poor) — giving an instant overview of wireless link health across the network. Click any node to see SSID, BSSID, channel, 802.11 standard, per-node signal statistics (average RSSI, range, sample count), traffic volume, frame type breakdown, and management events. Use the Wi-Fi search bar to filter by MAC address, SSID, or signal quality keyword (excellent, good, fair, poor).

Protocol Information Dialogs

Right-click any connection in the Connection Details popup to open a protocol-specific information dialog. PacketCircle inspects the actual Wireshark packet dissection and surfaces the details that matter — without leaving the plugin:

  • TLS/SSL — Certificate details (subject, issuer, validity, SANs), cipher suites, TLS version, ALPN, SNI, JA3/JA4 fingerprints
  • HTTP — Request/response headers, methods, status codes, URIs, content types, server info, cookies
  • SMB/CIFS & DCE/RPC — Share access, file operations, named pipes, RPC interfaces and operations
  • Kerberos — Ticket details (TGT/TGS), principals, realms, encryption types, pre-auth data, SPN
  • Email (SMTP/IMAP/POP3) — Senders, recipients, subjects, server responses, authentication, mailbox operations
  • SQL (MSSQL/MySQL/PostgreSQL) — Queries, database/schema, authentication, server version, error messages
  • VoIP/SIP — Call IDs, SIP methods/status codes, user agents, RTP payload types, SSRC

The context menu is protocol-aware and only shows relevant options based on the destination port (e.g. TLS Info for port 443, SQL Info for ports 1433/3306/5432).

Protocol Category Search

The search bar now accepts protocol category names — type TCP, UDP, ARP, ICMP, Infrastructure, or Unknown to highlight and isolate all matching pairs. Combine with the Select Results button to filter the visualization to a single category.

Protocol Category ↔ Pair List Sync

Toggling a protocol category checkbox (e.g. TCP, UDP, Infrastructure) now automatically checks or unchecks the corresponding pairs in the pair list, making Select Results work seamlessly with protocol filtering.

Acknowledgements

PacketCircle is built on Wireshark and its dissector framework.
UI built with Qt6.

AI-Assisted: yes (Claude) — protocol info dialogs, Wi-Fi monitoring mode, installer redesign, Linux build automation, documentation

Assets 2
Loading