Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using Ubuntu 12.04 LTS. I have experienced a small problem. I installed wireshark 1.8.2 from

ppa:eugenesan/ppa repository.

Since that time when I try to launch it, this error appears" wireshark: symbol lookup error: wireshark: undefined symbol: read_keytab_file . I have same problem with tshark. Wireshark won't launch. Help me two solve this issue.

share|improve this question

I had this same problem. I solved it by completely removing wireshark and all configurand installing it from source. You can download wiresharks source code here Wireshark Source.

share|improve this answer

Remove the version from the PPA again to revert to the official Ubuntu supplied version.

  1. Install ppa-purge Install ppa-purge.

  2. Run in the terminal:

    sudo ppa-purge ppa:eugenesan/ppa

    This should remove the PPA from the software sources and it will revert all packages installed from that PPA.

  3. Check the version of the Wireshark package installed. Should read like as follows:

    $ apt-cache policy wireshark
      Installed: 1.6.7-1
      Candidate: 1.6.7-1
      Version table:
     *** 1.6.7-1 0
            500 precise/universe amd64 Packages
            100 /var/lib/dpkg/status

In case you still have issues, force the official Ubuntu version of Wireshark (may be different by the time you read this, so run the command above!):

sudo apt-get install wireshark=1.6.7-1
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.