This paper was prepared for the Journal of Educational Technology in Computing, Vol. 12, Issue 1.

| Feature | Standard Wireshark | WSEE | |---------|--------------------|------| | Live packet capture | Yes (requires admin/root) | Disabled | | Read pcap files | Yes | Yes | | Display/analysis filters | Full | Full | | VoIP analysis, stats, etc. | Full | Full | | Capture filters | Yes | No | | Save captured packets | Yes | Read-only (cannot modify) | | User privileges needed | Elevated for capture | Standard user only |

At the heart of transitioning a learner from theory to practice lies the . This installer is not merely a packaging script; it is a pedagogical tool in its own right. It manages dependencies, configures system permissions, sets environment variables, and—crucially—enforces the feature restrictions that define the educational experience. This paper explores the installer’s role in achieving a safe, focused, and accessible learning environment. 2. Background: Wireshark vs. WSEE Before dissecting the installer, it is essential to understand the functional differences between standard Wireshark and WSEE: