Questions tagged [wireshark]
Wireshark is a program for capturing and analyzing network traffic.
0
votes
0answers
12 views
Wireshark wlan0 monitor mode problem
When i enable monitor mode on my wireless network and start scanning network in Wireshark after few seconds internet connection breaks and monitor mode changes to managed mode automatically. I changed ...
0
votes
0answers
50 views
Wireshark not decrypting SSL: “Can't load private key from $directory: can't import pem data: The requested data were not available”
I am trying to decrypt my web browser's HTTPS traffic using wireshark. I have set the SSLKEYLOGFILE variable to a file called premaster.txt with the following command export SSLKEYLOGFILE=/home/...
0
votes
0answers
19 views
Wireshark doesn't capture [duplicate]
When I run Wireshark 2.6.4 and try to start capturing, I get the following error:
Couldn't run /usr/bin/dumpcap in child process: Permission denied
After that, I change access rights for dumpcap ...
3
votes
1answer
1k views
Can't install wireshark on ubuntu 18.04.1 LTS
I created a brand new Ubuntu vm with beaver GUI but can't install wireshark on it.
I used the steps provided on this answer to get wireshark from ppa, but I get errors of dependencies or something...
...
1
vote
0answers
27 views
Tcpdump stop ungracefully
I am looking for a reliable solution to do package capture for test automation.
Right now, tcpdump has been used with the following command.
sudo tcpdump -i ens160 -w filename.pcap -G 60 -W 1
I ...
0
votes
0answers
12 views
while doing make for latest WireShark, it throws following error
[ 74%] Linking C shared library ../run/libwireshark.so
/usr/local/lib/liblua.a(loslib.o): In function os_tmpname':
loslib.c:(.text+0x290): warning: the use oftmpnam' is dangerous, better use mkstemp'
/...
0
votes
0answers
38 views
wireshark monitor mode ethernet card Ubuntu
I read somewhere that is best to disable all protocols on the capture card to avoid the card itself sending and receiving any traffic, in Windows you can just uncheck all protocols on the card ...
0
votes
0answers
37 views
Make Network Manager allow monitor mode?
So, I was using Wireshark with my wireless interface on monitor mode for some testing on my network, it ran fine for about a minute before switching back to managed mode. Some research led to me ...
0
votes
1answer
50 views
Ubuntu Wireshark Portable on USP
I have Ubuntu 16.04 LTS running on my PC. I installed Wireshark and it is working well. The issue is PC RAM which is 4 GB. After a short while capturing UDP packets the machine gets very slow and, ...
0
votes
0answers
290 views
Running pyshark (tshark) in a container: TShark not found
I'm trying to run pyshark (which uses tshark) inside a docker container, but without success so far. I already stumbled upon different problems using centos in a containter, in combination with ...
1
vote
1answer
151 views
Offline Wireshark install
I am looking for a way to install wireshark on a machine that has no internet connection.
Is there a binary that I didn't see on the download page?
Is there any option, other than building from ...
0
votes
1answer
35 views
Permission Access
Recently I downloaded wireshark from store but mistakely forgot to give permission for all users to use it. Is there any way to change it? I tried to reinstall but it didn't work.
0
votes
0answers
32 views
Specify Maximum TCP payload length for packets
I want my TCP packets to have 300 bytes payload atmost. In the other words, packets with more than 300 bytes must chunked to smaller 300 bytes packets. Is there any way to do that?
I've tried to set ...
1
vote
2answers
3k views
Open Firefox or Chrome to write to SSLKEYLOGFILE
I have exported a new user variable SSLKEYLOGFILE using the command:
export SSLKEYLOGFILE=($HOME)/sslkeylog.log
If I open Firefox or Chrome normally, no sslkeylog.log file is created (even if ...
0
votes
0answers
1k views
When installing Wireshark in Ubuntu 18.04 homonym user group isn't automatically created
This group is necessary to put users in that you want they're able to run Wireshark without being root.
And creating "wireshark" group manually doesn't work neither.
This bug? is new in Ubuntu 18.04;...
0
votes
1answer
305 views
Wireshark crash
While starting wireshark, I am getting following error:
sudo wireshark
This application failed to start because it could not find or load the Qt platform plugin "xcb".
Available platform plugins ...
1
vote
0answers
246 views
Couldn't run /usr/bin/dumpcap in child process: Permission denied [duplicate]
When I start wireshark this is the message I get.
Couldn't run /usr/bin/dumpcap in child process: Permission denied
Error by extcap pipe:
** (process:4740): WARNING **: Option '--remote-...
1
vote
1answer
124 views
Unable to ping but wireshark shows packets
I am trying to check my whether my ethernet network interface is working properly or not. I have two PC's and they are connected directly(without a switch). In one PC I tried to ping the other one ...
1
vote
1answer
743 views
Upgrading Wireshark
I have 16.04 LTS loaded. The distribution came with Wireshark ver 2.2.6. Wireshark now has available version 2.4.5. I downloaded the executable, but don't know how to upgrade my system to the new ...
0
votes
1answer
2k views
Wireshark installation complains about unmet dependencies [duplicate]
I am getting the below dependency errors while installing wireshark on my machine
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are ...
1
vote
1answer
584 views
Qualcomm Atheros QCA6174: Not capturing data packets in monitor mode
I am using an Dell Latitude 3480 laptop which comes with the Qualcomm Atheros QCA6174 Wifi card with Ubuntu OS (16.04 Release). When I use it as a sniffer (using wireshark) after enabling monitor mode ...
0
votes
0answers
42 views
How to cross verify whether the network on our ubuntu server goes via proxy? [duplicate]
We are using "Ubuntu Server 16.04.3 LTS" edition for one of our application in our production environment. All the servers in our environment are behind a Bluecoat proxy.
We have requested our ...
8
votes
2answers
8k views
How to run Wireshark on Ubuntu 17.10
I used to run wireshark on ubuntu 17.04 with
~/$ sudo wireshark
but now (just after update to 17.10) when I write the same I get an error
~/$ sudo wireshark
QStandardPaths: XDG_RUNTIME_DIR not ...
2
votes
1answer
778 views
Ubuntu 16.04 Firefox not creating SSLKEYLOGFILE to be used by wireshark
One should be able create an SSL Pre-Master-Secret key log file from firefox by creating the environment variable export SSLKEYLOGFILE=~/path/to/sslkeylog.log so external programs, i.e. Wireshark, are ...
1
vote
1answer
530 views
usbmon errors on wireshark
I ran tshark on Ubuntu/Windows 10 as follows:
$ tshark -i 6
Capturing on 'usbmon1'
tshark: The capture session could not be initiated on interface 'usbmon1' (Can't open USB bus file /sys/kernel/debug/...
0
votes
0answers
2k views
Wireshark error: XDG_RUNTIME_DIR not set
While running command sudo wireshark lo, I get the following error:
manishbhatti20@manishbhatti20:~$ sudo wireshark lo
QStandardPaths: XDG_RUNTIME_DIR not set, defaulting to '/tmp/runtime-root'
...
-1
votes
1answer
944 views
Ubuntu and WannaCry [closed]
I have a problem with a Ubuntu installation. I think I could be infected by the WannaCry virus.
I am quite good at not opening email attachments, so I don't think that is the particular attack ...
0
votes
1answer
83 views
port mirroring timestamp
I have enabled port mirroring of a specific port on my switch. The mirrored packets are from my eNodeB. I am viewing the mirrored packets on another server using wireshark. So where are the timestamps ...
1
vote
1answer
1k views
Cant install wireshark - failed to load xcb plugin
I have installed wireshark 2.2.6:
$ sudo apt install -y wireshark
Reading package lists... Done
Building dependency tree
Reading state information... Done
wireshark is already the newest ...
0
votes
1answer
861 views
Wireshark doesn`t see http
I installed wireshark on ubuntu, run capture on "wlp2s0f0" and load some pages in browser. But when I enter filter http in wireshark, I don`t see anything. What I do wrong and how I can solve this ...
0
votes
1answer
433 views
Problem with wput and vsftpd
I am trying to upload/modify files in my ftp server in Ubuntu 16.04 (in /srv/ftp directory) using wput from a remote host.
I get the error 553 Could not create file in Wireshark.
Here is my /etc/...
1
vote
0answers
2k views
Wireshark - Can't open preferences file “/home/guest/.config/wireshark/preferences”: Permission denied
First usage, when opening the Capture Interfaces Options the pop up goes 'Can't open preferences file "/home/guest/.config/wireshark/preferences": Permission denied.'
Installation was successful with:...
0
votes
1answer
167 views
How to open a 30gb or more wireshark file (.pcap) from system which is having a low configuration?
I have few wireshark file (.pcap) which is more than 30gb. And I having a system of low configuration (4GB RAM, 500GB HDD etc).
So how can I open the same .pcap file and able to analyse the same.
...
0
votes
1answer
816 views
wireshark is not capturing packets [duplicate]
I've executed Wireshark and I tried to capture packets.
I got the following error which shows up after clicking "start capturing":
3
votes
1answer
232 views
Compiling Wireshark on Ubuntu outputs many redeclaration errors [closed]
I am trying to install Wireshark for ZBOSS in Ubuntu
When I try to rebuild, I get this error:
In file included from /usr/include/glib-2.0/glib/gdir.h:32:0,
from /usr/include/glib-2....
1
vote
0answers
2k views
How to capture wifi wireless traffic? [closed]
I receive all packets directed to my system. The problem is never getting any packets of other systems to other systems that are connected to the same network.
I am working with Ubuntu and using ...
0
votes
0answers
53 views
How do I get wireshark script that starts when network connects and logs to unique timestamp file?
I'm using ubuntu 16.04
I've installed wireshark on it and I know how to start it manually each time.
What I would like is to have a script that automatically starts whenever I start my connection to ...
1
vote
2answers
1k views
How to configure a wireshark remote capture?
I have 2 machine M1 and M2 running on Debian 8.0 located in 2 remote network N1 and N2
M1 is capturing packets continuousl in N1 and has a known static IP.
M2 is accessing the capture remotely from ...
1
vote
0answers
48 views
Wireshark does not see local traffic when running as normal user
I am running some HTTP requests between a local Firefox and both local and remote web servers.
I capture traffic with Wireshark using the interface any.
When running Wireshark as my normal user, I ...
2
votes
0answers
437 views
tcpdump: Display only data section
I'm trying to process some pcap files. My pcaps have a standard tcp handshake for connecting and closing, and one or more interesting packets sent while the connection is open.
I need to extract ...
1
vote
1answer
2k views
how to get executable of dumpcap?
I was trying to remove wireshark from my system. Unfortunately at that time, I removed bumpcap file from /usr/bin folder using rm command. Now I am reinstalling an application wireshark. It's asking ...
4
votes
2answers
15k views
How to remove Wireshark from my Ubuntu 16.04 LTS?
I installed an application called Wireshark, using:
sudo apt-get install wireshark
I searched it and launched it. Then, I tried to uninstall it using GUI. But it is not removing.
I tried using:
...
1
vote
0answers
82 views
gnome app launcher not detecting gksudo .desktop files
I have an application : wireshark installed
the default /usr/share/applications/wireshark.desktop:
//...
Comment[uk]=Аналізатор мережевого трафіку
Icon=wireshark
TryExec=wireshark
Exec=wireshark %f
...
1
vote
0answers
194 views
A older compiled version of Wireshark(1.10.1) is not getting installed in newer ubuntu (version 16)
I have a deb file for wireshark 1.10.1 which was compiled with some extra flags for remote capture. The compilation was done in Ubuntu 12 few years ago. In ubuntu 14 it works perfectly. But when I am ...
1
vote
1answer
6k views
Wireshark does not show any interface to capture packets
I've installed Wireshark in Ubuntu 16.04 with the command:
sudo apt-get install wireshark
After program start, Start Capture and Stop Capture buttons are disabled. Even opening Capture Options ...
1
vote
1answer
86 views
tshark, listen to port does not work
How to listen to the port?
Just connect to host (IP, e.g google.com):
sudo tshark -i eth0 -H IP // not working
sudo tshark -i eth0 -H "IP" // not working
sudo tshark -i eth0 host IP // not working
...
1
vote
1answer
491 views
Wireshark invalid permission for usb monitor
I have an issue in Wireshark for usb monitoring. Apart from the way things worked in the past wireshark(not even seeing ports unless root) now displays the usb ports it can monitor, but it doesn't ...
0
votes
1answer
478 views
wireshark installing ubuntu14.0.4 error
I am trying to install by:
$ sudo add-apt-repository ppa:n-muench/programs-ppa
$ sudo apt-get update
$ sudo apt-get install wireshark
$ sudo apt-get remove wireshark
However, I got the below problem ...
7
votes
1answer
22k views
I'm not able to use wireshark “couldn't run /usr/bin/dumpcap in child process” [duplicate]
This message appears:
No interface can be used for capturing in this system with the current configuration.
(couldn't run /usr/bin/dumpcap in child process: permission denied)
Tell me how to avoid ...
0
votes
2answers
3k views
How to set wired interface on Monitor Mode?
I could set my Wireless connection on Monitor Mode. And i could capture packets using wireshark. But how do i set my wired connection on monitor mode so that i can capture wired traffic too on ...
