Wireshark can be "logically" separated into the backend (dissecting of protocols, file load/save, capturing, ...) and the frontend (the user interface). However, there's currently no clear separation between these two parts (no clear API definition), but this might change in the future.

The following frontends are currently maintained by the Wireshark development team:

There exist other Wireshark frontends, not developed nor maintained by the Wireshark development team:

This chapter is focused on the Wireshark frontend, and especially on the GTK specific things.