Questions tagged [wireshark]
Wireshark is a program for capturing and analyzing network traffic.
111
questions
0
votes
0answers
22 views
chromium+xdg-open Wireshark from an URL scheme handler: Couldn't run /usr/bin/dumpcap in child process: Permission denied
I need to start the local Wireshark from the web user interface of a web service to immediately start a capture session, using some external capture plugin to connect to the web service. When using ...
0
votes
1answer
146 views
Pi-Hole: How to block even more ads/DNS-Adresses with Wireshark?
So I'm running Ubuntu Server 20.04 on my Raspberry Pi 4 and on there a DHCP and Pi-Hole Server for ad blocking purposes. Websites like speedtest.net or n-tv.de are completely ad clean but YouTube for ...
0
votes
1answer
185 views
Wifi interface mode switches automatically back to managed (Ubuntu 20.04)
If I take the wifi interface offline: sudo ifconfig device_name down.
Then switch the mode to monitor: sudo iwconfig device_name mode monitor.
And then bring the device back online: sudo ifconfig ...
1
vote
1answer
14 views
Disable file permision
I'm currently want to upload my file.pcap that I create from wireshark, but I cannot that upload that file to internet because file permision.
How can I disable permision? so that there is no x and ...
0
votes
0answers
22 views
How to monitor packet sent by ping?
I just want to capture the packets sent by ping. I know there are tcpdump, but it doesn't just capture the packets for a single program. So is there a way to just capture the packet for a single ...
0
votes
0answers
38 views
Do I need an alpha card?
I have installed Ubuntu 20.04 as my main system on my acer laptop and everything works fine i can pretty much do anything i want.
however i downloaded wireshark to start capturing some packets and ...
2
votes
0answers
234 views
How to eliminate TCP Retransmission/TCP DUP ACK from the server?
Introduction of the application
We have an application which it receive data from a TCP protocol (IOT device) to our Ubuntu server. Both end send it's data receive confirmation to each other, in order ...
1
vote
0answers
31 views
TLS handshake decryption
I have an offline Pcap file with a lot of data from many different protocols. I would like to decrypt the Transmission Control Protocol data from the 3-way handshake.
Transmission Control Protocol ...
1
vote
1answer
388 views
Install Wireshark without confirm
When I tried to install Wireshark automatically with : sudo apt-get install -y wireshark Ubuntu gave me that image:
How can I install wireshark from terminal without press "YES" ?why does -...
0
votes
0answers
45 views
SIP trace for Alice calls Bob using linphone
Using two linphone clients I'm trying to call from "alice to bob" similar to:
Excerpts of tshark output which shows the linphone client on the PC attempting to contact the linphone ...
0
votes
0answers
400 views
wireshark problem while loading or opening wireshark qt.qpa.plugin
av_acharya@AnoxBotox:/$ wireshark
qt.qpa.plugin: Could not find the Qt platform plugin "xcb" in "path/to/plugins"
This application failed to start because no Qt platform plugin ...
0
votes
0answers
927 views
Error: Could not connect to any X display [Unable to run wireshark on Ubuntu WSL]
I installed Wireshark in my Ubuntu for Windows WSL following these steps.
It's installed correctly as wireshark --help and wireshark --version work fine.
But upon running wireshark with command ...
4
votes
1answer
1k views
tshark - Automatically set YES when asked “Should non-superusers be able to capture packets”
Thank you for your incredible work here.
I'd like to install tshark in a docker container, and while writing a dockerfile I was wondering if there's a way to automatically set YES when asked to ...
0
votes
0answers
176 views
Wireshark not playing g729 codec
Good day All.
I am running Ubuntu 18.04.3 LTS with Wireshark Version 3.0.7
I am having issues playing my g729 audio from the RTP player.
Please note that the same pcaps play 100% in Windows.
$ ...
2
votes
1answer
471 views
How to install latest WireShark? [duplicate]
I see that the latest Wireshark has been release. I would like to have it since it has some features that I need.
https://packages.qa.debian.org/w/wireshark.html
Unfortunately, if I use sudo apt-get ...
2
votes
1answer
1k views
add-apt-repository is throwing strange errors (18.03)
I was attempting to enable the wireshark repositories when following the guide that they give on their website, and when I ran
sudo add-apt-repository ppa:Wireshark-dev/stable
it returned these ...
1
vote
1answer
295 views
How to send packets at 512 nano sec delay using Socket Programming and UDP socket
Using SOCK_DGRAM for UDP sockets
All packets are 22 bytes in length (ie 64 including headers)
client.c
...
no_of_packets--;
sprintf(buf, "#:!0 rem");
sprintf(buf, format , buf);
...
0
votes
1answer
1k views
Wireshark GUI not runnig on Windows subsystem for Linux
I have installed Xming on my windows and I have set environment variable export DISPLAY=:0 on Ubuntu. Other GUI programs, like eog is running. But when I try running Wireshark it shows error messages:
...
0
votes
1answer
649 views
I am unable to install wireshark
On running the command sudo apt install wireshark-qt:
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may ...
0
votes
0answers
32 views
i want to get rid of an entire package?
So I installed Wireshark just now and I said no to the super user thing(in hindsight I have literally no idea why), and when I tried to run it it said it didn't have permission, then gave me some ...
5
votes
2answers
7k views
Can't install wireshark on ubuntu 18.04.1 LTS
I created a brand new Ubuntu vm with beaver GUI but can't install wireshark on it.
I used the steps provided on this answer to get wireshark from ppa, but I get errors of dependencies or something...
...
3
votes
1answer
999 views
Tcpdump stop ungracefully
I am looking for a reliable solution to do package capture for test automation.
Right now, tcpdump has been used with the following command.
sudo tcpdump -i ens160 -w filename.pcap -G 60 -W 1
I ...
0
votes
1answer
387 views
Ubuntu Wireshark Portable on USP
I have Ubuntu 16.04 LTS running on my PC. I installed Wireshark and it is working well. The issue is PC RAM which is 4 GB. After a short while capturing UDP packets the machine gets very slow and, ...
0
votes
0answers
3k views
Running pyshark (tshark) in a container: TShark not found
I'm trying to run pyshark (which uses tshark) inside a docker container, but without success so far. I already stumbled upon different problems using centos in a containter, in combination with ...
1
vote
1answer
2k views
Offline Wireshark install
I am looking for a way to install wireshark on a machine that has no internet connection.
Is there a binary that I didn't see on the download page?
Is there any option, other than building from ...
0
votes
1answer
39 views
Permission Access
Recently I downloaded wireshark from store but mistakely forgot to give permission for all users to use it. Is there any way to change it? I tried to reinstall but it didn't work.
4
votes
3answers
19k views
Open Firefox or Chrome to write to SSLKEYLOGFILE
I have exported a new user variable SSLKEYLOGFILE using the command:
export SSLKEYLOGFILE=($HOME)/sslkeylog.log
If I open Firefox or Chrome normally, no sslkeylog.log file is created (even if ...
1
vote
1answer
836 views
Wireshark crash
While starting wireshark, I am getting following error:
sudo wireshark
This application failed to start because it could not find or load the Qt platform plugin "xcb".
Available platform plugins ...
1
vote
0answers
2k views
Couldn't run /usr/bin/dumpcap in child process: Permission denied [duplicate]
When I start wireshark this is the message I get.
Couldn't run /usr/bin/dumpcap in child process: Permission denied
Error by extcap pipe:
** (process:4740): WARNING **: Option '--remote-...
1
vote
1answer
906 views
Unable to ping but wireshark shows packets
I am trying to check my whether my ethernet network interface is working properly or not. I have two PC's and they are connected directly(without a switch). In one PC I tried to ping the other one ...
1
vote
1answer
6k views
Upgrading Wireshark
I have 16.04 LTS loaded. The distribution came with Wireshark ver 2.2.6. Wireshark now has available version 2.4.5. I downloaded the executable, but don't know how to upgrade my system to the new ...
0
votes
1answer
4k views
Wireshark installation complains about unmet dependencies [duplicate]
I am getting the below dependency errors while installing wireshark on my machine
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are ...
1
vote
1answer
1k views
Qualcomm Atheros QCA6174: Not capturing data packets in monitor mode
I am using an Dell Latitude 3480 laptop which comes with the Qualcomm Atheros QCA6174 Wifi card with Ubuntu OS (16.04 Release). When I use it as a sniffer (using wireshark) after enabling monitor mode ...
10
votes
2answers
14k views
How to run Wireshark on Ubuntu 17.10
I used to run wireshark on ubuntu 17.04 with
~/$ sudo wireshark
but now (just after update to 17.10) when I write the same I get an error
~/$ sudo wireshark
QStandardPaths: XDG_RUNTIME_DIR not ...
2
votes
1answer
2k views
Ubuntu 16.04 Firefox not creating SSLKEYLOGFILE to be used by wireshark
One should be able create an SSL Pre-Master-Secret key log file from firefox by creating the environment variable export SSLKEYLOGFILE=~/path/to/sslkeylog.log so external programs, i.e. Wireshark, are ...
1
vote
1answer
1k views
usbmon errors on wireshark
I ran tshark on Ubuntu/Windows 10 as follows:
$ tshark -i 6
Capturing on 'usbmon1'
tshark: The capture session could not be initiated on interface 'usbmon1' (Can't open USB bus file /sys/kernel/debug/...
-1
votes
1answer
1k views
Ubuntu and WannaCry [closed]
I have a problem with a Ubuntu installation. I think I could be infected by the WannaCry virus.
I am quite good at not opening email attachments, so I don't think that is the particular attack ...
0
votes
1answer
153 views
port mirroring timestamp
I have enabled port mirroring of a specific port on my switch. The mirrored packets are from my eNodeB. I am viewing the mirrored packets on another server using wireshark. So where are the timestamps ...
1
vote
2answers
6k views
Cant install wireshark - failed to load xcb plugin
I have installed wireshark 2.2.6:
$ sudo apt install -y wireshark
Reading package lists... Done
Building dependency tree
Reading state information... Done
wireshark is already the newest ...
0
votes
1answer
3k views
Wireshark doesn`t see http
I installed wireshark on ubuntu, run capture on "wlp2s0f0" and load some pages in browser. But when I enter filter http in wireshark, I don`t see anything. What I do wrong and how I can solve this ...
0
votes
1answer
805 views
Problem with wput and vsftpd
I am trying to upload/modify files in my ftp server in Ubuntu 16.04 (in /srv/ftp directory) using wput from a remote host.
I get the error 553 Could not create file in Wireshark.
Here is my /etc/...
1
vote
0answers
3k views
Wireshark - Can't open preferences file “/home/guest/.config/wireshark/preferences”: Permission denied
First usage, when opening the Capture Interfaces Options the pop up goes 'Can't open preferences file "/home/guest/.config/wireshark/preferences": Permission denied.'
Installation was successful with:...
0
votes
1answer
293 views
How to open a 30gb or more wireshark file (.pcap) from system which is having a low configuration?
I have few wireshark file (.pcap) which is more than 30gb. And I having a system of low configuration (4GB RAM, 500GB HDD etc).
So how can I open the same .pcap file and able to analyse the same.
...
0
votes
1answer
2k views
wireshark is not capturing packets [duplicate]
I've executed Wireshark and I tried to capture packets.
I got the following error which shows up after clicking "start capturing":
3
votes
1answer
340 views
Compiling Wireshark on Ubuntu outputs many redeclaration errors [closed]
I am trying to install Wireshark for ZBOSS in Ubuntu
When I try to rebuild, I get this error:
In file included from /usr/include/glib-2.0/glib/gdir.h:32:0,
from /usr/include/glib-2....
0
votes
0answers
77 views
How do I get wireshark script that starts when network connects and logs to unique timestamp file?
I'm using ubuntu 16.04
I've installed wireshark on it and I know how to start it manually each time.
What I would like is to have a script that automatically starts whenever I start my connection to ...
1
vote
2answers
2k views
How to configure a wireshark remote capture?
I have 2 machine M1 and M2 running on Debian 8.0 located in 2 remote network N1 and N2
M1 is capturing packets continuousl in N1 and has a known static IP.
M2 is accessing the capture remotely from ...
1
vote
0answers
90 views
Wireshark does not see local traffic when running as normal user
I am running some HTTP requests between a local Firefox and both local and remote web servers.
I capture traffic with Wireshark using the interface any.
When running Wireshark as my normal user, I ...
2
votes
0answers
601 views
tcpdump: Display only data section
I'm trying to process some pcap files. My pcaps have a standard tcp handshake for connecting and closing, and one or more interesting packets sent while the connection is open.
I need to extract ...
2
votes
1answer
3k views
how to get executable of dumpcap?
I was trying to remove wireshark from my system. Unfortunately at that time, I removed bumpcap file from /usr/bin folder using rm command. Now I am reinstalling an application wireshark. It's asking ...
