Ethereal changes name to Wireshark


Author: Joe Barr

Gerald Combs, founder of the Ethereal project — billed as the world’s most popular network protocol analyzer — caused a flurry of excitement among users and developers Wednesday when he announced on the Ethereal developers mailing list that he was changing jobs, moving to a new location, and taking the project and its core developers with him as he leaves.

His initial announcement to the list provided some explanation:

I recently accepted a job with CACE Technologies, best known for WinPcap. This means that I get to work with Loris Degioanni and Gianluca Varenni, and that my wife and I get to raise our daughter in Davis, CA.

The move also means a major change for the project. We’re continuing development under the name “Wireshark”, at The web site, mailing lists, bug tracker, SVN repository, buildbot, and other resources are already in place. All recent source code submissions have been checked into the new repository, and automated builds are available at

The next version of Wireshark will be 0.99.1. A prerelease version, 0.99.1pre1, is available for download right now at

Several developers were not happy with the sketchy explanation for the change and demanded to know more about what was happening. Several speculated on the secrecy and suddenness of the move.

Thursday night, Combs sent a long message to the developer’s list, which directly answers most of the lingering questions and removes the mystery behind the move. Here is his (lightly edited for typos and emphasis) explanation of events:

A lot of questions have been flying around about the name change. I’ll try to answer them in this message and the next. If I missed one, please let me know.

Why the name change?

John R.’s synopsis is essentially correct. Several years ago, my former employer (NIS) registered trademarks for the Ethereal name and logo. At the time this provided valuable legal protection for the project. Unfortunately, when I left we weren’t able to come to an agreement on the trademarks and they stayed behind.

There are several details about this that I can’t discuss, but I will say this: There was no “fight” between NIS and I. Although I’m deeply disappointed about the trademarks, I understand their decision. NIS is a great company and I still hold everyone there in high regard.

My reason to leave had more to do with the opportunities available at CACE (for the project, my family, and myself) than anything. The “good stuff” that will come from moving to CACE will far outstrip any “bad stuff” from the name change.

What will happen to Ethereal and What about the mailing lists, bug tracker, etc.? Will an announcement be posted on the site?

Dunno. That’s up to my former employer.

Why wasn’t there a discussion about the name change?

The name change wasn’t discussed in public because that’s a really, really dumb thing to do. Google for “openssh domain” for one example, but there are plenty of others. I’ve tried to make the project as open as possible, but there are some things that simply can’t be discussed in public.

Why was the name change kept secret for so long?

I wasn’t sure we had to change names until about two weeks ago. At that time the choice fell down to announcing the change immediately (with zero content on the Wireshark site) and getting some sort of minimal infrastructure in place. I chose the latter, which included a web site, mailing lists, bug tracker, SVN repository, and a downloadable prerelease. Getting everything set up took a little longer than expected. Ultimately, it was my decision, so if you don’t like it, blame me.

Finally, please don’t dismiss my respect (and awe at various times) for the Wireshark/Ethereal developer and user community. I’ve been busting my ass for the last couple of weeks to ensure that we have the same (or better) support infrastructure under Wireshark that we did under Ethereal, and will continue to do so.

Combs also addressed the big question of “what happens to the Wireshark trademark now if Combs leaves CACE, or is hit by a bus?”

I’ll quit the project before we change the name again. There’s no way I’m going through this crap a second time. The trademark registrations are in progress. They’ll initially be owned by me.

I’d like opinions from the community about where we should proceed after that. If you’re comfortable with me holding the trademarks, I’d be proud to do so. If you’d rather see an organization formed to ensure the continued success of the project, I’d be happy about that too. If you have any other (realistic, constructive) suggestions, please send them.

Combs also wondered “why aren’t there more umbrella organizations for open source like the ASF? In particular, why isn’t there an umbrella organization for open source networking software?”

For more information on Wireshark, see the Wireshark Web site and FAQ.


  • News