https://blog.wireshark.org/2023/07/wireshark-is-25/ Sniff free or die The official Wireshark blog Menu Skip to content * Home * About Wireshark Is 25: The email that started it all and the lessons learned along the way 5 Replies 25 years ago, I sent this email, which ended up changing the course of my life From: Gerald Combs - Unicom Communications To: gtk-list [at] redhat . com Subject: ANNOUNCE: Ethereal 0.2.0 Date: Tue, 14 Jul 1998 21:47:01 -0500 (CDT) Ethereal is a network analyzer that lets you capture and interactively browse the contents of Ethernet frames. Packet data can be read from a file, or live from a local network interface. More information, including the source distribution, can be found at http://ethereal.zing.org . Comments and patches are welcome. I remember being nervous and excited at the time, wondering what the reaction would be. I had spent the previous few months working on a protocol analyzer, which was something I needed at work. There are a couple of things to note: the name wasn't Wireshark (we changed the name in 2006) and at the time of this email, protocol analyzers were rare, you could even say a precious thing. Back then, if you wanted to see what was happening on your network, command line tools like tcpdump and snoop were available at no cost, but if you wanted a GUI analyzer, you had to pay for a product that might cost the equivalent of a luxury car. I needed an analyzer to do my job, so I ended up writing a simple one and releasing it as open source. As it turned out, other people needed an analyzer too. A couple of days after I sent this email, I received a patch. Then another, and another. This quickly blossomed into a thriving developer community which has kept me busy ever since. In the intervening years, the project and its community have grown beyond any expectation that I could have had. Today, Wireshark is used by people around the world to make their networks fast, reliable, and secure, and educators use it to teach the next generation of security and network engineers about the low-level aspects of networks. What does it take to keep a project successful for so long? It would be nice to be able to say that from the very beginning, there was a grand, clear vision of how everything would evolve and unfold. However, as with any significant endeavor, you have to learn to adapt and apply the resources at hand as effectively as you can. In retrospect, Neils Bohr's quote "An expert is a person who has made all the mistakes that can be made in a very narrow field." rings especially true in our case. I did manage to learn that in order for an open source project to grow and thrive, you have to ensure that needs are met in the following categories: User support. Living, breathing people make use of your project, and sometimes need assistance. They might be daily power users or novices, and their needs vary. Educator support. Experts and power users can teach others how to get the most out of your project, and need assistance as well. Developer support. The easier you can make it for people to contribute code or otherwise improve the project, the healthier the project and community will be. Attorneys and accountants. Until GitHub and GitLab add "intellectual property law" or "travel reimbursement" buttons, you're going to need to find outside help for the regulatory, legal, and financial aspects of your project. Infrastructure. You need servers, containers, and services that provide an online presence and allow for collaboration. GitHub or GitLab may or may not be sufficient for this depending on your specific needs. This isn't quite a Maslow-style hierarchy of needs for open source, but it's close. The lines between users, educators, and developers can be blurry, but in general, users and educators depend on the output that developers produce, and the project as a whole needs a solid infrastructure in order for everyone to collaborate. It also doesn't apply uniformly to all projects. For example, a small, single-purpose image processing library might only need infrastructure and developers, and its user community would likely be other developers. A hosting service like GitHub or GitLab would be sufficient for the project's infrastructure. On the other hand, a large, feature-rich image editing application might have extensive needs in all five categories along with a business model to fund the project. Wireshark falls into the latter group, and needs quite a bit of care and feeding. Until recently, the business model for meeting these needs has been "ask my employer if they'll host the project," which worked surprisingly well. My employers (CACE Technology, Riverbed and now Sysdig) provided the resources for Wireshark that go way beyond what GitHub and GitLab can offer, such as SharkFest, a conference dedicated to protocol analysis. In recent years, it became clear that the project would best meet its needs by standing on its own, and with the help of Sysdig, we moved the project to the Wireshark Foundation earlier this year so that the project can continue to grow and serve its community. 25 years ago when I sent that email, I never thought I would be blogging about the project today! If you've ever thought about starting an open source project, don't hesitate to do so. Supporting and managing Wireshark has given me a wonderful career, and opportunities to meet and work with brilliant, inspiring people. If I had to distill everything I've learned down to a couple of pieces of advice, it would be this: The community has valuable insights to share. Let them do that. Don't be afraid to start something new. You never know where it might take you 25 years from now. Finally, I can't thank you all enough for using and contributing to Wireshark over the years. I can't wait to see what the future brings. Cheers! This entry was posted in Announcement. Post navigation - Announcing the Wireshark Foundation 5 thoughts on "Wireshark Is 25: The email that started it all and the lessons learned along the way" 1. [7e09f]Mike B July 15, 2023 at 10:58 am Congratulations on 25 years! Thank you for everything you have done to make my job and the jobs of many thousands easier. 2. [8a1e2]J. Zandbergen July 15, 2023 at 12:38 pm Hi Gerald, Congratulations on 25 years wireshark! Thank you so much for ~20 years of lessons learned and problems fixed! Cheers! 3. [ddd9d]Dan July 15, 2023 at 3:13 pm Congrats! it must take a ton of effort and motivation to keep going for 25 years! 4. [9c315]John July 15, 2023 at 5:57 pm Thank you for so many fixes in many production environment because of Wireshark! 5. [9c315]John July 15, 2023 at 5:59 pm *environments :)). I may need to run wireshark on my keyboard Leave a Reply Your email address will not be published. Required fields are marked * [ ] [ ] [ ] [ ] [ ] [ ] [ ] Comment * [ ] Name * [ ] Email * [ ] Website [ ] [Post Comment] [ ] [ ] [ ] [ ] [ ] [ ] [ ] D[ ] This Blog * Register * Log in * Entries feed * Comments feed * WordPress.org Links * Gerald on Twitter * SharkFest on Twitter * Sysdig * Wireshark * Wireshark on Twitter Recent Comments * John on Wireshark Is 25: The email that started it all and the lessons learned along the way * John on Wireshark Is 25: The email that started it all and the lessons learned along the way * Dan on Wireshark Is 25: The email that started it all and the lessons learned along the way * J. Zandbergen on Wireshark Is 25: The email that started it all and the lessons learned along the way * Mike B on Wireshark Is 25: The email that started it all and the lessons learned along the way Archives * July 2023 * March 2023 * October 2022 * January 2022 * July 2019 * July 2018 * February 2017 * June 2016 * November 2015 * December 2014 * July 2014 * April 2014 * October 2013 * August 2013 * July 2013 * January 2013 * October 2012 * June 2012 * March 2012 * December 2011 * June 2011 * May 2011 * April 2011 * February 2011 * October 2010 * September 2010 * August 2010 * June 2010 * April 2010 * March 2010 * February 2010 * January 2010 * December 2009 * November 2009 * October 2009 * September 2009 * August 2009 * July 2009 Proudly powered by WordPress