Questions tagged [wireshark]

Wireshark is a program for capturing and analyzing network traffic.

Filter by
Sorted by
Tagged with
0 votes
0 answers
18 views

Problem with network interfaces in Wireshark

I have the latest version of Ubuntu on VMware virtual machine. I have to capture layer 2 (802.1 Q) packets in Wireshark, but the problem is that when I start Ubuntu I cannot capture these types of ...
Jesuscorn's user avatar
0 votes
0 answers
44 views

How to enable protocol without GUI in tshark?

tshark -G heuristic-decodes | grep dvb ----output----- udp dvb-s2_modeadapt F how to turn it True with command line or config ? OS:ubuntu 22.04 thx all.
Karl Jhan's user avatar
0 votes
0 answers
50 views

On Wireshark in Capture Options is it always just a line under Monitor Mode for interfaces?

I ran wireshark on my Mac and there is a checkbox in Capture Options for my interface under monitor mode. I can check it and uncheck it. When I run wireshark on ubuntu on the same wifi connection and ...
filifunk's user avatar
  • 135
0 votes
0 answers
32 views

help with network setting within ubuntu

I'm hoping someone can help, I set my router to map MAC address to static IPs last night, around the same time I installed nmap and wireshark to help me setup a proximity sensor within my home ...
Mc Nulty's user avatar
0 votes
0 answers
67 views

No wifi interface in wireshark

I have installed wireshark using apt and has enabled non-root user access in the same way as shown in a ton of posts and articles. Nothing other than that. I can see a lot of interfaces e.g loopback ...
vbnm's user avatar
  • 1
0 votes
0 answers
42 views

Trace IP address for a Tox user throw a bootstarp

I Try to get the IP of a Tox-friend. I used wireshark, to figure out wich DHT bootstap is used to connect us (from this list https://nodes.tox.chat/). I analyze packets from and to the DHT and i didn'...
Noussa Nouss's user avatar
1 vote
0 answers
137 views

Error when running wireshark

I get the following error when running wireshark. sudo wireshark error: wireshark: symbol lookup error: wireshark: undefined symbol: wslua_plugins_get_descriptions versions: ubuntu: 22.04 wireshark:...
mohsen's user avatar
  • 11
0 votes
1 answer
207 views

Allowing wireshark to capture only for certain users doesn't seem to work

I've answered yes to sudo dpkg-reconfigure wireshark-common, and done the following: sudo usermod -a -G wireshark my_username groups my_username confirms that I'm in the group. sudo chgrp wireshark /...
An old man in the sea.'s user avatar
-1 votes
1 answer
106 views

Net monitoring program for Ubuntu that can filter by pid, showing destination IPs with the ability to save logs

Sometimes I use cloud gaming service. The problem, however, is that all my Internet traffic goes through the vpn by default. I want to exclude game traffic from vpn and I know how to do it, but what i ...
Vlad Sheryshev's user avatar
0 votes
0 answers
424 views

How to stop tshark or tcpdump without `Unable to write output: Broken pipe` error?

I need to stop tcpdump or tshark loop based on a condition. Currently I'm using break. while IFS= read -r line; do if [[ $line =~ 'some protocol' ]]; then echo $line; break; fi; done < <(sudo ...
Maf's user avatar
  • 135
1 vote
2 answers
302 views

How to analyze packets from tshark in realtime via bash?

I need to analyze the IPSec packages from this command in real time: sudo tshark -i <My_Interface> -Y '(ip.addr == <My_IP>)' I need to check whether an isakmp package is sent to set a ...
Maf's user avatar
  • 135
2 votes
2 answers
801 views

How can I use complex filters by protocol in tcpdump?

I can filter by lots of protocols in wireshark and tshark, like this: sudo tshark -i <My_Interface> -Y '(ip.addr == <My_IP> and isakmp)' How can I add the protocol filter in a tcpdump ...
Maf's user avatar
  • 135
0 votes
0 answers
219 views

chromium+xdg-open Wireshark from an URL scheme handler: Couldn't run /usr/bin/dumpcap in child process: Permission denied

I need to start the local Wireshark from the web user interface of a web service to immediately start a capture session, using some external capture plugin to connect to the web service. When using ...
TheDiveO's user avatar
  • 351
0 votes
1 answer
503 views

Pi-Hole: How to block even more ads/DNS-Adresses with Wireshark?

So I'm running Ubuntu Server 20.04 on my Raspberry Pi 4 and on there a DHCP and Pi-Hole Server for ad blocking purposes. Websites like speedtest.net or n-tv.de are completely ad clean but YouTube for ...
finnizzda's user avatar
0 votes
1 answer
3k views

Wifi interface mode switches automatically back to managed (Ubuntu 20.04)

If I take the wifi interface offline: sudo ifconfig device_name down. Then switch the mode to monitor: sudo iwconfig device_name mode monitor. And then bring the device back online: sudo ifconfig ...
sunwarr10r's user avatar
  • 1,409
1 vote
1 answer
23 views

Disable file permision

I'm currently want to upload my file.pcap that I create from wireshark, but I cannot that upload that file to internet because file permision. How can I disable permision? so that there is no x and ...
Roby Cigar's user avatar
0 votes
0 answers
224 views

How to monitor packet sent by ping?

I just want to capture the packets sent by ping. I know there are tcpdump, but it doesn't just capture the packets for a single program. So is there a way to just capture the packet for a single ...
user1424739's user avatar
2 votes
1 answer
1k views

How to eliminate TCP Retransmission/TCP DUP ACK from the server?

Introduction of the application We have an application which it receive data from a TCP protocol (IOT device) to our Ubuntu server. Both end send it's data receive confirmation to each other, in order ...
FR STAR's user avatar
  • 121
1 vote
0 answers
51 views

TLS handshake decryption

I have an offline Pcap file with a lot of data from many different protocols. I would like to decrypt the Transmission Control Protocol data from the 3-way handshake. Transmission Control Protocol ...
Lorenzo's user avatar
  • 11
5 votes
1 answer
2k views

Install Wireshark without confirm

When I tried to install Wireshark automatically with : sudo apt-get install -y wireshark Ubuntu gave me that image: How can I install wireshark from terminal without press "YES" ?why does -...
MicrosoctCprog's user avatar
0 votes
0 answers
1k views

wireshark problem while loading or opening wireshark qt.qpa.plugin

av_acharya@AnoxBotox:/$ wireshark qt.qpa.plugin: Could not find the Qt platform plugin "xcb" in "path/to/plugins" This application failed to start because no Qt platform plugin ...
Avishek Acharya Av's user avatar
0 votes
1 answer
3k views

Error: Could not connect to any X display [Unable to run wireshark on Ubuntu WSL]

I installed Wireshark in my Ubuntu for Windows WSL following these steps. It's installed correctly as wireshark --help and wireshark --version work fine. But upon running wireshark with command ...
Sunil Singh's user avatar
5 votes
2 answers
4k views

tshark - Automatically set YES when asked "Should non-superusers be able to capture packets"

Thank you for your incredible work here. I'd like to install tshark in a docker container, and while writing a dockerfile I was wondering if there's a way to automatically set YES when asked to ...
Valonqar's user avatar
  • 109
0 votes
0 answers
266 views

Wireshark not playing g729 codec

Good day All. I am running Ubuntu 18.04.3 LTS with Wireshark Version 3.0.7 I am having issues playing my g729 audio from the RTP player. Please note that the same pcaps play 100% in Windows. $ ...
Carlo's user avatar
  • 1
2 votes
1 answer
2k views

How to install latest WireShark? [duplicate]

I see that the latest Wireshark has been release. I would like to have it since it has some features that I need. https://packages.qa.debian.org/w/wireshark.html Unfortunately, if I use sudo apt-get ...
Van Tr's user avatar
  • 175
2 votes
1 answer
2k views

add-apt-repository is throwing strange errors (18.03)

I was attempting to enable the wireshark repositories when following the guide that they give on their website, and when I ran sudo add-apt-repository ppa:Wireshark-dev/stable it returned these ...
Upexus's user avatar
  • 21
1 vote
1 answer
848 views

How to send packets at 512 nano sec delay using Socket Programming and UDP socket

Using SOCK_DGRAM for UDP sockets All packets are 22 bytes in length (ie 64 including headers) client.c ... no_of_packets--; sprintf(buf, "#:!0 rem"); sprintf(buf, format , buf); ...
Anuraag Tummanapally's user avatar
0 votes
1 answer
2k views

Wireshark GUI not runnig on Windows subsystem for Linux

I have installed Xming on my windows and I have set environment variable export DISPLAY=:0 on Ubuntu. Other GUI programs, like eog is running. But when I try running Wireshark it shows error messages: ...
Pythenx's user avatar
  • 11
0 votes
1 answer
1k views

I am unable to install wireshark

On running the command sudo apt install wireshark-qt: Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may ...
HarshM's user avatar
  • 13
0 votes
0 answers
35 views

i want to get rid of an entire package?

So I installed Wireshark just now and I said no to the super user thing(in hindsight I have literally no idea why), and when I tried to run it it said it didn't have permission, then gave me some ...
Xodus's user avatar
  • 1
5 votes
2 answers
10k views

Can't install wireshark on ubuntu 18.04.1 LTS

I created a brand new Ubuntu vm with beaver GUI but can't install wireshark on it. I used the steps provided on this answer to get wireshark from ppa, but I get errors of dependencies or something... ...
LoukMouk's user avatar
  • 255
3 votes
1 answer
2k views

Tcpdump stop ungracefully

I am looking for a reliable solution to do package capture for test automation. Right now, tcpdump has been used with the following command. sudo tcpdump -i ens160 -w filename.pcap -G 60 -W 1 I ...
Krisz's user avatar
  • 275
0 votes
1 answer
709 views

Ubuntu Wireshark Portable on USP

I have Ubuntu 16.04 LTS running on my PC. I installed Wireshark and it is working well. The issue is PC RAM which is 4 GB. After a short while capturing UDP packets the machine gets very slow and, ...
Kazem Chm's user avatar
0 votes
0 answers
5k views

Running pyshark (tshark) in a container: TShark not found

I'm trying to run pyshark (which uses tshark) inside a docker container, but without success so far. I already stumbled upon different problems using centos in a containter, in combination with ...
Erik van de Ven's user avatar
1 vote
1 answer
3k views

Offline Wireshark install

I am looking for a way to install wireshark on a machine that has no internet connection. Is there a binary that I didn't see on the download page? Is there any option, other than building from ...
levengli's user avatar
  • 183
0 votes
1 answer
43 views

Permission Access

Recently I downloaded wireshark from store but mistakely forgot to give permission for all users to use it. Is there any way to change it? I tried to reinstall but it didn't work.
ABR's user avatar
  • 1
6 votes
3 answers
32k views

Open Firefox or Chrome to write to SSLKEYLOGFILE

I have exported a new user variable SSLKEYLOGFILE using the command: export SSLKEYLOGFILE=($HOME)/sslkeylog.log If I open Firefox or Chrome normally, no sslkeylog.log file is created (even if ...
BEWARB's user avatar
  • 899
1 vote
1 answer
1k views

Wireshark crash

While starting wireshark, I am getting following error: sudo wireshark This application failed to start because it could not find or load the Qt platform plugin "xcb". Available platform plugins ...
Patrick's user avatar
  • 159
1 vote
0 answers
2k views

Couldn't run /usr/bin/dumpcap in child process: Permission denied [duplicate]

When I start wireshark this is the message I get. Couldn't run /usr/bin/dumpcap in child process: Permission denied Error by extcap pipe: ** (process:4740): WARNING **: Option '--remote-...
Joseph Atwere's user avatar
1 vote
1 answer
2k views

Unable to ping but wireshark shows packets

I am trying to check my whether my ethernet network interface is working properly or not. I have two PC's and they are connected directly(without a switch). In one PC I tried to ping the other one ...
Xter's user avatar
  • 11
1 vote
1 answer
10k views

Upgrading Wireshark

I have 16.04 LTS loaded. The distribution came with Wireshark ver 2.2.6. Wireshark now has available version 2.4.5. I downloaded the executable, but don't know how to upgrade my system to the new ...
Ken S's user avatar
  • 11
0 votes
1 answer
5k views

Wireshark installation complains about unmet dependencies [duplicate]

I am getting the below dependency errors while installing wireshark on my machine Some packages could not be installed. This may mean that you have requested an impossible situation or if you are ...
Prateek Joshi's user avatar
1 vote
1 answer
2k views

Qualcomm Atheros QCA6174: Not capturing data packets in monitor mode

I am using an Dell Latitude 3480 laptop which comes with the Qualcomm Atheros QCA6174 Wifi card with Ubuntu OS (16.04 Release). When I use it as a sniffer (using wireshark) after enabling monitor mode ...
Karun John's user avatar
10 votes
2 answers
15k views

How to run Wireshark on Ubuntu 17.10

I used to run wireshark on ubuntu 17.04 with ~/$ sudo wireshark but now (just after update to 17.10) when I write the same I get an error ~/$ sudo wireshark QStandardPaths: XDG_RUNTIME_DIR not ...
Mateusz Filipiuk's user avatar
2 votes
1 answer
2k views

Ubuntu 16.04 Firefox not creating SSLKEYLOGFILE to be used by wireshark

One should be able create an SSL Pre-Master-Secret key log file from firefox by creating the environment variable export SSLKEYLOGFILE=~/path/to/sslkeylog.log so external programs, i.e. Wireshark, are ...
user3325563's user avatar
2 votes
1 answer
1k views

usbmon errors on wireshark

I ran tshark on Ubuntu/Windows 10 as follows: $ tshark -i 6 Capturing on 'usbmon1' tshark: The capture session could not be initiated on interface 'usbmon1' (Can't open USB bus file /sys/kernel/debug/...
jh2222's user avatar
  • 31
-1 votes
1 answer
1k views

Ubuntu and WannaCry [closed]

I have a problem with a Ubuntu installation. I think I could be infected by the WannaCry virus. I am quite good at not opening email attachments, so I don't think that is the particular attack ...
RISCyBusiness's user avatar
0 votes
1 answer
218 views

port mirroring timestamp

I have enabled port mirroring of a specific port on my switch. The mirrored packets are from my eNodeB. I am viewing the mirrored packets on another server using wireshark. So where are the timestamps ...
Ashish Kurian's user avatar
1 vote
2 answers
11k views

Cant install wireshark - failed to load xcb plugin

I have installed wireshark 2.2.6: $ sudo apt install -y wireshark Reading package lists... Done Building dependency tree Reading state information... Done wireshark is already the newest ...
buddy123's user avatar
  • 121
0 votes
1 answer
4k views

Wireshark doesn`t see http

I installed wireshark on ubuntu, run capture on "wlp2s0f0" and load some pages in browser. But when I enter filter http in wireshark, I don`t see anything. What I do wrong and how I can solve this ...
Evgeniy's user avatar
  • 121