# Wireshark packet capture vs EPC
**URL:** https://forum.networklessons.com/t/wireshark-packet-capture-vs-epc/14322
**Category:** Network Services
**Created:** [May 10, 2021, 7:55am UTC](https://forum.networklessons.com/t/wireshark-packet-capture-vs-epc/14322 "2021-05-10T07:55:45Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@edelmann.lukas](https://forum.networklessons.com/u/edelmann.lukas)
#### Post date: [May 10, 2021, 7:55am UTC](https://forum.networklessons.com/t/wireshark-packet-capture-vs-epc/14322/1 "2021-05-10T07:55:45Z")
Hi,
what is the difference between Wireshark packet capture and EPC (Embedded Packet Capture)?
For me it seems to be the same, but they have 2 different topics in the documentation.
> **[Network Management Configuration Guide, Cisco IOS XE Everest 16.6.x (Catalyst...](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-6/configuration_guide/nmgmt/b_166_nmgmt_3850_cg/configuring_packet___capture.html#reference_63BFB1A123554CA7A6B7F076E8AF082C)**
>
> Configuring Packet Capture
---
### Author:  [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [May 12, 2021, 5:09am UTC](https://forum.networklessons.com/t/wireshark-packet-capture-vs-epc/14322/2 "2021-05-12T05:09:26Z")
Hello Lukas
When it comes to packet capturing on 3850 switches, there are two types of built-in features that allow you to do this. One uses Embedded Packet Capture about which you can find out more detailed information here:
[https://networklessons.com/cisco/ccie-enterprise-infrastructurecisco-embedded-packet-capture-epc](https://networklessons.com/cisco/ccie-enterprise-infrastructurecisco-embedded-packet-capture-epc)
But there is also the option of using a built-in version of Wireshark that actually runs on the device itself. This is available for the IP base and IP services versions of the IOS. This is a specialized version of Wireshark designed for the switch itself (Version 1.10.8 as per documentation).
The reason they have two different topics in the documentation is that each one is implemented differently. The portions of the document that further describe the differences between EPC and Wireshark are:
- [Overview of Packet Capture Tool](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-6/configuration_guide/nmgmt/b_166_nmgmt_3850_cg/configuring_packet___capture.html#concept_9011FAD2FAE5498EA31570B5E293CF78)
- [Wireshark overview](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-6/configuration_guide/nmgmt/b_166_nmgmt_3850_cg/configuring_packet___capture.html#concept_84314EA832684C5EBB65FD8EEBA11740)
- [Embedded Packet Capture Overview](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-6/configuration_guide/nmgmt/b_166_nmgmt_3850_cg/configuring_packet___capture.html#concept_C35DC053E69F4311A9EC03FD4FC30DE1)
Now although both EPC and Wireshark perform much the same thing, Wireshark is more versatile and has more options. More details about their differences are found in the document itself.
I hope this has been helpful!
Laz
---
### Author:  [@edelmann.lukas](https://forum.networklessons.com/u/edelmann.lukas)
#### Post date: [June 25, 2021, 11:49am UTC](https://forum.networklessons.com/t/wireshark-packet-capture-vs-epc/14322/3 "2021-06-25T11:49:59Z")
Hi Laz,
thanks a lot for your great answer 🙂
Lukas