Questions tagged [wireshark]
Wireshark is a program for capturing and analyzing network traffic.
122
questions
0
votes
1
answer
4k
views
Wireshark doesn`t see http
I installed wireshark on ubuntu, run capture on "wlp2s0f0" and load some pages in browser. But when I enter filter http in wireshark, I don`t see anything. What I do wrong and how I can solve this ...
0
votes
1
answer
937
views
Problem with wput and vsftpd
I am trying to upload/modify files in my ftp server in Ubuntu 16.04 (in /srv/ftp directory) using wput from a remote host.
I get the error 553 Could not create file in Wireshark.
Here is my /etc/...
1
vote
0
answers
3k
views
Wireshark - Can't open preferences file "/home/guest/.config/wireshark/preferences": Permission denied
First usage, when opening the Capture Interfaces Options the pop up goes 'Can't open preferences file "/home/guest/.config/wireshark/preferences": Permission denied.'
Installation was successful with:...
0
votes
1
answer
370
views
How to open a 30gb or more wireshark file (.pcap) from system which is having a low configuration?
I have few wireshark file (.pcap) which is more than 30gb. And I having a system of low configuration (4GB RAM, 500GB HDD etc).
So how can I open the same .pcap file and able to analyse the same.
...
0
votes
1
answer
4k
views
wireshark is not capturing packets [duplicate]
I've executed Wireshark and I tried to capture packets.
I got the following error which shows up after clicking "start capturing":
3
votes
1
answer
399
views
Compiling Wireshark on Ubuntu outputs many redeclaration errors [closed]
I am trying to install Wireshark for ZBOSS in Ubuntu
When I try to rebuild, I get this error:
In file included from /usr/include/glib-2.0/glib/gdir.h:32:0,
from /usr/include/glib-2....
0
votes
0
answers
89
views
How do I get wireshark script that starts when network connects and logs to unique timestamp file?
I'm using ubuntu 16.04
I've installed wireshark on it and I know how to start it manually each time.
What I would like is to have a script that automatically starts whenever I start my connection to ...
1
vote
2
answers
2k
views
How to configure a wireshark remote capture?
I have 2 machine M1 and M2 running on Debian 8.0 located in 2 remote network N1 and N2
M1 is capturing packets continuousl in N1 and has a known static IP.
M2 is accessing the capture remotely from ...
1
vote
0
answers
175
views
Wireshark does not see local traffic when running as normal user
I am running some HTTP requests between a local Firefox and both local and remote web servers.
I capture traffic with Wireshark using the interface any.
When running Wireshark as my normal user, I ...
2
votes
0
answers
790
views
tcpdump: Display only data section
I'm trying to process some pcap files. My pcaps have a standard tcp handshake for connecting and closing, and one or more interesting packets sent while the connection is open.
I need to extract ...
2
votes
1
answer
4k
views
how to get executable of dumpcap?
I was trying to remove wireshark from my system. Unfortunately at that time, I removed bumpcap file from /usr/bin folder using rm command. Now I am reinstalling an application wireshark. It's asking ...
9
votes
5
answers
52k
views
How to remove Wireshark from my Ubuntu 16.04 LTS?
I installed an application called Wireshark, using:
sudo apt-get install wireshark
I searched it and launched it. Then, I tried to uninstall it using GUI. But it is not removing.
I tried using:
...
1
vote
0
answers
163
views
gnome app launcher not detecting gksudo .desktop files
I have an application : wireshark installed
the default /usr/share/applications/wireshark.desktop:
//...
Comment[uk]=Аналізатор мережевого трафіку
Icon=wireshark
TryExec=wireshark
Exec=wireshark %f
...
1
vote
0
answers
265
views
A older compiled version of Wireshark(1.10.1) is not getting installed in newer ubuntu (version 16)
I have a deb file for wireshark 1.10.1 which was compiled with some extra flags for remote capture. The compilation was done in Ubuntu 12 few years ago. In ubuntu 14 it works perfectly. But when I am ...
1
vote
1
answer
13k
views
Wireshark does not show any interface to capture packets
I've installed Wireshark in Ubuntu 16.04 with the command:
sudo apt-get install wireshark
After program start, Start Capture and Stop Capture buttons are disabled. Even opening Capture Options ...
1
vote
1
answer
318
views
tshark, listen to port does not work
How to listen to the port?
Just connect to host (IP, e.g google.com):
sudo tshark -i eth0 -H IP // not working
sudo tshark -i eth0 -H "IP" // not working
sudo tshark -i eth0 host IP // not working
...
1
vote
1
answer
897
views
Wireshark invalid permission for usb monitor
I have an issue in Wireshark for usb monitoring. Apart from the way things worked in the past wireshark(not even seeing ports unless root) now displays the usb ports it can monitor, but it doesn't ...
0
votes
1
answer
796
views
wireshark installing ubuntu14.0.4 error
I am trying to install by:
$ sudo add-apt-repository ppa:n-muench/programs-ppa
$ sudo apt-get update
$ sudo apt-get install wireshark
$ sudo apt-get remove wireshark
However, I got the below problem ...
40
votes
1
answer
151k
views
I'm not able to use wireshark "couldn't run /usr/bin/dumpcap in child process" [duplicate]
This message appears:
No interface can be used for capturing in this system with the current configuration.
(couldn't run /usr/bin/dumpcap in child process: permission denied)
Tell me how to avoid ...
0
votes
2
answers
10k
views
How to set wired interface on Monitor Mode?
I could set my Wireless connection on Monitor Mode. And i could capture packets using wireshark. But how do i set my wired connection on monitor mode so that i can capture wired traffic too on ...
0
votes
1
answer
1k
views
How many ports opened by a single application
I am writing a program in nodejs that will be firing number of calls to an api. I need to limit number of requests to 100 at a time. I have finished writing the application, but how can I check in ...
0
votes
2
answers
1k
views
What does "Compression Method : null(0)" mean in Client Hello?
As a task of my assignment, I used wireshark to capture packets. Now in Client Hello message, I saw compression method:null(0). Now I am confused what is that mean? Does that mean no compression is ...
1
vote
1
answer
993
views
Running Wireshark (Monitor Mode) using Live DVD
I'm having trouble installing/running Wireshark to capture traffic other than my own. I've tried multiple usb-wifi adapters*, so not sure if it's a driver, hardware, or an installation issue. For ...
2
votes
2
answers
3k
views
Failing to install wireshark because of errors in wireshark-common as a sudo Super User
I don't have the root password so I entered sudo super user mode in an attempt to install wireshark on my laptop. I've tried installing wireshark previously but I did not have root access the first ...
0
votes
1
answer
38
views
Find outr which IPs are from program and which IPs are from addons
I have a program (that legitimately calls authors) and plug-ins that also call authors (not so legitimately). I want to run the vanilla version of a program and collect IPs it is trying to connect. ...
2
votes
2
answers
6k
views
How to enable IPV6 packet capturing in WireShark at the same time as IPV4?
I am running Ubuntu 15.10 with GNOME 3.18, and for some debugging work need to capture IPV6 packets going to and from a specific port, however I understand that by default IPV6 packets are not ...
8
votes
2
answers
43k
views
How to install Wireshark on my Dell with Ubuntu 14.04
Can anybody help me installing WireShark?
My Computer: Core i5 Intel Inspiron 15 5558 DELL 8GB RAM 1TB HDD. UBUNTU 14.04
78
votes
7
answers
323k
views
How to install Wireshark
I am new to Linux and have a need to install Wireshark 2.0.0 on VirtualBox's Xubuntu 14.04.
I have already downloaded .tar.gz package and extracted it. Then I opened terminal in the wireshark folder ...
0
votes
1
answer
979
views
Configure Wireshark for PPPoE connection
Wireshark is not displaying my PPPoE connection in its interface list.
Official wireshark website says PPP connections can be captured by configuring the ppp daemon and I've no idea how to do the same....
0
votes
2
answers
2k
views
Promiscuous mode not working with ubuntu and wireshark
I am running Ubuntu Linux and have installed wireshark on it. I can see the incoming and outgoing traffic just fine. Now I want to see the traffic from other devices which are on my LAN. So, I did:
...
1
vote
1
answer
11k
views
Converting .pcap files to .txt using tshark
I am trying to convert my .pcap packet capture files generated by tcpdump into a text format. I am getting a permission error whenever I try to convert the .pcap file or even just port ">" the stdout ...
2
votes
0
answers
3k
views
Having problem with opening softwares from the terminal (including wireshark & gedit)
I am using Ubuntu 14.10 and I am having errors opening softwares from the terminal. For example:
build@build:/usr/local/bin$ sudo wireshark
gdk_mir_display_open
Failed to connect to Mir: Failed to ...
0
votes
1
answer
2k
views
How to tell which USB port to monitor
I'm trying to capture some packets for a USB device which works in a MS Virtual Machine, so that I can try to write some Linux support.
I am using libpcap and wireshark to capture the USB packets.
...
3
votes
1
answer
1k
views
wireshark crashes when using flow graph feature ubuntu 14.04
Using the flow graph feature on wireshark Version 1.10.6 causes wireshark to crash. I am running wireshark on ubuntu 14.04,
0
votes
1
answer
3k
views
How to get Wireshark to monitor a specific IP in the background
I have got Wireshark installed and I am wanting to monitor the traffic to and from a specific IP address, so what would be really useful would be if I could get Wireshark to start by itself on startup ...
0
votes
1
answer
2k
views
Wireshark Openflow support not working
I installed mininet to see Openflow in action. However when I installed wireshark with apt-get and with the script provided by mininet, but I got the same error:
$ sudo wireshark
21:18:34 ...
0
votes
1
answer
836
views
IP addresses of DNS Queries Show Up Backwards in Wireshark
I have been using DNSCrypt with dnsmasq on my Ubuntu 14.10 machine. When running a dumcap via Wireshark, I've noticed a couple of odd occurrences lately. Firstly, after disconnecting from my VPN, with ...
2
votes
1
answer
556
views
Wireshark Error when starting capture
I'm using Wireshark on Ubuntu 14.04 LTS and I have it up and running. However, when I click start after selecting an interface, the program freezes.
I have tried 'export LIBOVERLAY_SCROLLBAR=0' with ...
1
vote
1
answer
552
views
WireShark Version 1.6.7 Uninstallation Ubuntu 12.04 LTS 64 bit
I'm running Ubuntu 12.04 LTS 64 bit on a Dell XPS-13. I'm trying to remove WireShark version 1.6.7....
I'm not having any luck.
Please help
7
votes
1
answer
30k
views
Wireshark is not able to capture on any of the interfaces [duplicate]
I just switched to Ubuntu from openSuse where I used wireshark with no problem. Now I receive the error that "You don't have permission to capture on that device" referring to my 802.11 wifi. I have ...
0
votes
1
answer
101
views
Is Wireshark the correct tool as a data (traffic) meter? Something better?
My household is allotted 250 gigabytes per month. Someone in my family is using-up all the data. The "traffic meter" on my router (WNDR3700) only tells me total data usage. I want to break it down by ...
2
votes
2
answers
9k
views
How to update wireshark interface list?
I installed Wireshark(v1.10.6) from software centre. In the interface list, only bluetooth is shown. I wanted to capture packets that are sent & received from wireless connection.
How should I do ...
14
votes
1
answer
232k
views
How to install driver for TP-Link TL-WN722N on Ubuntu 14.04?
Hi I am new to Ubuntu and Linux. As I am developing a WiFi product, I want to capture the WiFi traffic wirelessly with Wireshark. Having some searching in the web, I know that I can do that with a USB ...
-1
votes
2
answers
949
views
How To Apply Wireshark Patch [closed]
Running Wireshark Version 1.10.6 (v1.10.6 from master-1.10) on 14.04 LTS.
It crashes anytime i Open a VoIP Graph Flow.
Got the patch at https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9179
Can't ...
7
votes
3
answers
3k
views
What is the difference between `groups $USER`and `groups` in a terminal?
When I run the the following command in a terminal I get different output.
I try to find out if I am a member of the Wireshark group.
groups $USER
Does list wireshark
groups
Does not list ...
54
votes
3
answers
159k
views
How to enable Wireshark without running as root in Trusty 14.04
I installed Wireshark. Running as root is not recommended, so
I Did
sudo dpkg-reconfigure wireshark-common
According to:
http://wiki.wireshark.org/CaptureSetup/CapturePrivileges
http://anonscm....
16
votes
5
answers
68k
views
running wireshark "Lua: Error during loading"
By running wireshark in 14.04 I got this error What should I do to solve this?
Lua: Error during loading:
[string "/usr/share/wireshark/init.lua"]:46: dofile has been disabled due to running ...
0
votes
1
answer
941
views
Check what connections a software / application is trying to make
How to check what urls and ports a particular application or software is trying to access? Does it require Wireshark of something?
0
votes
1
answer
1k
views
How to rresolve the error: /var/cache/apt/archives/wireshark-common_1.11.3+svn54990-0ubuntu1~saucy1~ppa0_amd64.deb
I have an ubuntu 13.10 and try to install wireshark on it. But I keep on getting the following error.
mininet@ubun_13_10:~/mininet$ sudo apt-get install wireshark
Reading package lists... Done
...
0
votes
2
answers
3k
views
Wireshark does not start
I installed Wireshark from the Ubuntu software center (running Ubuntu version 13.10) and got no error messages after.
The problem is that Wireshark splash window closes halfway through the progress ...