The reason for the popularity of this tool over others of this sort, is that it offers graphical interface to view and analyze network results so it’s easy to use. Originally called Ethereal, it was renamed to Wireshark in 2006 due to some trademark issues, the tiny application is one of the most useful utility when troubleshooting network problems. Remove GPG key and repository: sudo rm -rf /etc/apt//wireshark-dev-ubuntu-stable.gpg* sudo rm -rf /etc/apt//wireshark-dev-ubuntu-stable-jammy.Wireshark is a cross platform, open source, network analyzer. If you wish to completely remove TShark and all related dependencies, execute the following command: sudo apt purge -autoremove -y tshark The -i option allows capturing packets on a specific network interface. We can find network interfaces which are available to the TShark with command: tshark -D After reconnection, you can check TShark version: tshark -versionĮxecute tshark command without any arguments to start capturing packets on default network interface: tshark To make changes to take effect, logout and login to your machine.

Run the following command to add the current user to a wireshark group: sudo usermod -a -G wireshark $USER It will add the wireshark group and anyone who is a member of this group will be able to capture packets without being root user. Install TShark: sudo apt install -y tsharkĭuring installation, you will be asked if you want to allow non-root users to be able to capture packets. Install TSharkĪdd the Wireshark and TShark repository: sudo add-apt-repository -y ppa:wireshark-dev/stable This tutorial demonstrates how to install TShark on Ubuntu 22.04.

TShark is a command line version of Wireshark that can be used when a graphical user interface isn't available. This tool enables to capture packets from a network and print them to the standard output. TShark is a command line tool for analyzing network traffic.

Wireshark for linux ubuntu