Wireshark-users: [Wireshark-users] Wireshark helps expose spy network
From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Tue, 12 May 2009 14:02:04 -0700
According to the NYT, Wireshark was used to uncover GhostNet:

http://www.nytimes.com/2009/05/12/science/12cyber.html?_r=1&emc=eta1