This is my first time using it.External Links: Links to external web pages have been provided as a convenience and for informational purposes only. Now for how to use Wireshark?-I have no idea. Add your username to the `wireshark` group: run this, and be sure to choose 'Yes' this time OR: Close Wireshark, and then configure it to not require root: # 1. Potential errors when trying to capture packets:Ĭouldn't run /usr/bin/dumpcap in child process: Permission deniedĮither of those things above means that you need root permissions to capture packets. The question mentioned above will be asked answer '' to it.

The installation method can be changed any time by running: sudo dpkg-reconfigure wireshark-common You can see it online in the Wireshark repository here: : This path is mentioned in the menu above. Source where I learned this: from the README.Debian file contained on my local system here: /usr/share/doc/wireshark-common/. # run this, and be sure to choose 'Yes' this time Close Wireshark, and then reconfigure it to choose 'Yes'. Close Wireshark, and then run it as root: sudo wireshark Not a problem, you have two ways to fix it: What if you chose 'No' in the menu above, during installation? │ Should non-superusers be able to capture packets? │ If in doubt, it is suggested to leave it disabled. │ Enabling this feature may be a security risk, so it is disabled by default. │ For more detailed information please see /usr/share/doc/wireshark-common/ once the package is installed. │ because less of the code will run with elevated privileges. This is recommended over the alternative of running Wireshark/Tshark directly as root, │ │ Dumpcap can be installed in a way that allows members of the 'wireshark' system group to capture packets. In this way you can clearly see that the PPA will help you get a much newer version. If you install the Wireshark PPA with sudo add-apt-repository ppa:wireshark-dev/stable first, however, and then run sudo apt -s install wireshark, you'll see it will install version 4.0.6-1. For anyone looking for a really concrete example, on Ubuntu 22.04, if you run sudo apt -s install wireshark, you'll see it will install version 3.6.2-2. on the -s option passed to apt, see my comment here (and the answer above it): At the time of these instructions, shows the latest stable relase downloadable for other OSs, such as Windows or Mac, as being 4.0.7.įor more info. However, if I add the PPA first and then run sudo apt -s install wireshark, I can see that I'd get version 4.0.6-1, which is nearly the newest. On Ubuntu 22.04.2, for instance, I can see from sudo apt -s install wireshark (a simulated install) that I would get only version 3.6.2-2. If you run sudo apt install wireshark with out first adding the latest PPA via sudo add-apt-repository ppa:wireshark-dev/stable, you'll get an older version of Wireshark. If it works now, you're done! If not, check out my details below to see if you missed something.Īgain, since your username is part of the wireshark group, you can capture packets with out running sudo wireshark to run it as root.

It will now show up permanently as an icon in your left-hand launcher bar. Right-click it and go to 'Add To Favorites'. Press the Windows ( Super) key and type in 'Wireshark'. (Optional) Add Wireshark to your Ubuntu favorites bar: It will ask if you'd like to save your packet capture (pcap) file. Press the red square (stop symbol) in the top-left to stop the packet capture. In the window that opens up, click the blue shark fin icon in the top-left, which says 'Start capturing packets' when you hover on it. Now log out of Ubuntu (or restart your computer), and log back in, to register your username in this new group. # that as an entry now in the response here. # Ensure your username is now part of the `wireshark` group. # Add your user to the `wireshark` group. # When it says, 'Should non-superusers be able to capture packets?', Sudo add-apt-repository ppa:wireshark-dev/stable Install Wireshark and add your user to the wireshark group: # Add the latest managed package so you can get a newer version How to install the latest PPA-managed version of Wireshark on Ubuntu Many of the other answers here contain parts of my answer, and I've upvoted them, but none contain everything I'm going to show. I'd like a more thorough and modern answer.

Install wireshark linux cli