55

I am new to Linux and have a need to install Wireshark 2.0.0 on VirtualBox's Xubuntu 14.04. I have already downloaded .tar.gz package and extracted it. Then I opened terminal in the wireshark folder and type /.configure with intention to follow it by make and sudo make install executions but the attempt as unsuccessful as sudo apt-get install wireshark. Could somebody help me how to install Wireshark step by step, please?

  • 7
    What went wrong with sudo apt-get install wireshark? – muru Nov 21 '15 at 10:01
  • dpkg was interrupted, you must manually run 'sudo dpkg --configure -a' to correct the problem. – Stanislav Jirák Nov 21 '15 at 10:23
  • @StanislavJirák cat /etc/sources – Gayan Weerakutti Nov 21 '15 at 10:52
  • cat: /etc/sources: No such file or directory – Stanislav Jirák Nov 21 '15 at 12:31
  • @reversiblean cat /etc/apt/sources.list – Neil Nov 22 '15 at 0:03
75

Step 1: Add the stable official PPA. To do this, go to terminal by pressing Ctrl+Alt+T and run:

sudo add-apt-repository ppa:wireshark-dev/stable

Step 2: Update the repository:

sudo apt-get update

Step 3: Install wireshark 2.0:

sudo apt-get install wireshark

Step 4: Run wireshark:

sudo wireshark

If you get a error couldn't run /usr/bin/dumpcap in child process: Permission Denied. go to the terminal again and run:

sudo dpkg-reconfigure wireshark-common

Say YES to the message box. This adds a wireshark group. Then add user to the group by typing

sudo adduser $USER wireshark

Then restart your machine and open wireshark. It works. Good Luck.

| improve this answer | |
  • This seems to work, I see Setting up wireshark (2.4.4-1~16.04.0). But when I open it and do Help > About I see version 2.2.6 and it behaves quite differently from the one I have on Windows. For example, it mostly displays "unknown protocol". Am I missing something to get the latest version? – Nagev Apr 17 '18 at 8:38
  • If you don't want to restart your machine for now, you can do newgrp wireshark temporarily. – Abhishek Kashyap Nov 5 '18 at 9:26
  • 1
    This is outdated. – Goddard May 31 '19 at 17:05
4

Open terminal and type the commands:

  1. sudo apt-get install wireshark
  2. sudo dpkg-reconfigure wireshark-common
  3. sudo adduser $USER wireshark
  4. wireshark

If you getting wireshark running error, so close it and then just do the following:

  1. Go to usr/share/wireshark
  2. Open init.lua with a text editor
  3. Change disable_lua = false to disable_lua = true
| improve this answer | |
  • Where's the evidence to support the LUA changing bits? This tends to work out of the box, and you don't really have to go altering installed package bits typically to get this to work. – Thomas Ward Jul 30 '18 at 20:20
3

To do this, go to terminal by pressing Ctrl+Alt+T and run:

sudo apt install wireshark

Apt should take care of all of the dependency issues for you.

Use the following command to install downloaded Wireshark debs:

dpkg -i wireshark-common_2.0.5.0-1_i386.deb wireshark_wireshark-2.0.5.0-1_i386.deb

dpkg doesn’t take care of all dependencies, but reports what’s missing. You can usually resolve problems by then running

sudo apt install -f
| improve this answer | |
2

To add to Thusitha's answer, in Step 4 you either run as sudo or if you do not want to run all processes as root, then you set the message box to 'YES' (to install dumpcap in such a way that it allows users of the wireshark group to run it without sudo) and add user to wireshark group. (be sure to log out and log in before running wireshark so that the group privileges are reloaded). You can then just run wireshark without root.

| improve this answer | |
1

For those on ubuntu 18.04, go to terminal and run:

sudo apt install wireshark

It will install wireshark ( in my case v2.6.8 ) and you will be asked to add dumpcap in wireshark user group so you don't need to be root to execute it.

If you say:

NO > you're good to go, but you gonna need root privileges to run it.

YES > after installation finishes you should add yourself to wireshark user group:

sudo usermod -a -G wireshark YOUR_USERNAME

That's ALL!

| improve this answer | |
0
  1. Type sudo apt update The APT package repository cache should be updated.

  2. Now, Run the following command to install Wireshark on your Ubuntu machine: sudo apt install wireshark

By default, Wireshark must be started as root (can also be done with sudo) privileges in order to work. If you want to run Wireshark without root privileges or without sudo, then select and press .

  1. Wireshark should be installed.
| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.