I am new to Linux and have a need to install Wireshark 2.0.0 on VirtualBox's Xubuntu 14.04. I have already downloaded .tar.gz package and extracted it. Then I opened terminal in the wireshark folder and type /.configure with intention to follow it by make and sudo make install executions but the attempt as unsuccessful as sudo apt-get install wireshark. Could somebody help me how to install Wireshark step by step, please?

  • 7
    What went wrong with sudo apt-get install wireshark?
    – muru
    Nov 21 '15 at 10:01
  • dpkg was interrupted, you must manually run 'sudo dpkg --configure -a' to correct the problem. Nov 21 '15 at 10:23
  • @StanislavJirák cat /etc/sources Nov 21 '15 at 10:52
  • cat: /etc/sources: No such file or directory Nov 21 '15 at 12:31
  • @reversiblean cat /etc/apt/sources.list
    – Neil
    Nov 22 '15 at 0:03

Step 1: Add the stable official PPA. To do this, go to terminal by pressing Ctrl+Alt+T and run:

sudo add-apt-repository ppa:wireshark-dev/stable

Step 2: Update the repository:

sudo apt-get update

Step 3: Install wireshark 2.0:

sudo apt-get install wireshark

Step 4: Run wireshark:

sudo wireshark

If you get a error couldn't run /usr/bin/dumpcap in child process: Permission Denied. go to the terminal again and run:

sudo dpkg-reconfigure wireshark-common

Say YES to the message box. This adds a wireshark group. Then add user to the group by typing

sudo adduser $USER wireshark

Then restart your machine and open wireshark. It works. Good Luck.

  • This seems to work, I see Setting up wireshark (2.4.4-1~16.04.0). But when I open it and do Help > About I see version 2.2.6 and it behaves quite differently from the one I have on Windows. For example, it mostly displays "unknown protocol". Am I missing something to get the latest version?
    – Nagev
    Apr 17 '18 at 8:38
  • If you don't want to restart your machine for now, you can do newgrp wireshark temporarily. Nov 5 '18 at 9:26
  • 1
    This is outdated.
    – Goddard
    May 31 '19 at 17:05

Open terminal and type the commands:

  1. sudo apt-get install wireshark
  2. sudo dpkg-reconfigure wireshark-common
  3. sudo adduser $USER wireshark
  4. wireshark

If you getting wireshark running error, so close it and then just do the following:

  1. Go to usr/share/wireshark
  2. Open init.lua with a text editor
  3. Change disable_lua = false to disable_lua = true
  • Where's the evidence to support the LUA changing bits? This tends to work out of the box, and you don't really have to go altering installed package bits typically to get this to work.
    – Thomas Ward
    Jul 30 '18 at 20:20

To do this, go to terminal by pressing Ctrl+Alt+T and run:

sudo apt install wireshark

Apt should take care of all of the dependency issues for you.

Use the following command to install downloaded Wireshark debs:

dpkg -i wireshark-common_2.0.5.0-1_i386.deb wireshark_wireshark-

dpkg doesn’t take care of all dependencies, but reports what’s missing. You can usually resolve problems by then running

sudo apt install -f

To add to Thusitha's answer, in Step 4 you either run as sudo or if you do not want to run all processes as root, then you set the message box to 'YES' (to install dumpcap in such a way that it allows users of the wireshark group to run it without sudo) and add user to wireshark group. (be sure to log out and log in before running wireshark so that the group privileges are reloaded). You can then just run wireshark without root.


For those on ubuntu 18.04, go to terminal and run:

sudo apt install wireshark

It will install wireshark ( in my case v2.6.8 ) and you will be asked to add dumpcap in wireshark user group so you don't need to be root to execute it.

If you say:

NO > you're good to go, but you gonna need root privileges to run it.

YES > after installation finishes you should add yourself to wireshark user group:

sudo usermod -a -G wireshark YOUR_USERNAME

That's ALL!

  1. Type sudo apt update The APT package repository cache should be updated.

  2. Now, Run the following command to install Wireshark on your Ubuntu machine: sudo apt install wireshark

By default, Wireshark must be started as root (can also be done with sudo) privileges in order to work. If you want to run Wireshark without root privileges or without sudo, then select and press .

  1. Wireshark should be installed.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.