Questions tagged [wireshark]

Wireshark is a program for capturing and analyzing network traffic.

Filter by
Sorted by
Tagged with
0 votes
1 answer
4k views

Wireshark doesn`t see http

I installed wireshark on ubuntu, run capture on "wlp2s0f0" and load some pages in browser. But when I enter filter http in wireshark, I don`t see anything. What I do wrong and how I can solve this ...
Evgeniy's user avatar
  • 121
0 votes
1 answer
937 views

Problem with wput and vsftpd

I am trying to upload/modify files in my ftp server in Ubuntu 16.04 (in /srv/ftp directory) using wput from a remote host. I get the error 553 Could not create file in Wireshark. Here is my /etc/...
Aroonalok's user avatar
  • 101
1 vote
0 answers
3k views

Wireshark - Can't open preferences file "/home/guest/.config/wireshark/preferences": Permission denied

First usage, when opening the Capture Interfaces Options the pop up goes 'Can't open preferences file "/home/guest/.config/wireshark/preferences": Permission denied.' Installation was successful with:...
ubuntubu's user avatar
  • 433
0 votes
1 answer
370 views

How to open a 30gb or more wireshark file (.pcap) from system which is having a low configuration?

I have few wireshark file (.pcap) which is more than 30gb. And I having a system of low configuration (4GB RAM, 500GB HDD etc). So how can I open the same .pcap file and able to analyse the same. ...
Ajay Yadav's user avatar
0 votes
1 answer
4k views

wireshark is not capturing packets [duplicate]

I've executed Wireshark and I tried to capture packets. I got the following error which shows up after clicking "start capturing":
mbhatti_20's user avatar
3 votes
1 answer
399 views

Compiling Wireshark on Ubuntu outputs many redeclaration errors [closed]

I am trying to install Wireshark for ZBOSS in Ubuntu When I try to rebuild, I get this error: In file included from /usr/include/glib-2.0/glib/gdir.h:32:0, from /usr/include/glib-2....
Isabel Cardenas's user avatar
0 votes
0 answers
89 views

How do I get wireshark script that starts when network connects and logs to unique timestamp file?

I'm using ubuntu 16.04 I've installed wireshark on it and I know how to start it manually each time. What I would like is to have a script that automatically starts whenever I start my connection to ...
user637251's user avatar
1 vote
2 answers
2k views

How to configure a wireshark remote capture?

I have 2 machine M1 and M2 running on Debian 8.0 located in 2 remote network N1 and N2 M1 is capturing packets continuousl in N1 and has a known static IP. M2 is accessing the capture remotely from ...
user123456's user avatar
  • 2,368
1 vote
0 answers
175 views

Wireshark does not see local traffic when running as normal user

I am running some HTTP requests between a local Firefox and both local and remote web servers. I capture traffic with Wireshark using the interface any. When running Wireshark as my normal user, I ...
Nicolas Raoul's user avatar
2 votes
0 answers
790 views

tcpdump: Display only data section

I'm trying to process some pcap files. My pcaps have a standard tcp handshake for connecting and closing, and one or more interesting packets sent while the connection is open. I need to extract ...
xenakaaii's user avatar
2 votes
1 answer
4k views

how to get executable of dumpcap?

I was trying to remove wireshark from my system. Unfortunately at that time, I removed bumpcap file from /usr/bin folder using rm command. Now I am reinstalling an application wireshark. It's asking ...
Dipesh Patel's user avatar
9 votes
5 answers
52k views

How to remove Wireshark from my Ubuntu 16.04 LTS?

I installed an application called Wireshark, using: sudo apt-get install wireshark I searched it and launched it. Then, I tried to uninstall it using GUI. But it is not removing. I tried using: ...
Dipesh Patel's user avatar
1 vote
0 answers
163 views

gnome app launcher not detecting gksudo .desktop files

I have an application : wireshark installed the default /usr/share/applications/wireshark.desktop: //... Comment[uk]=Аналізатор мережевого трафіку Icon=wireshark TryExec=wireshark Exec=wireshark %f ...
CybeX's user avatar
  • 526
1 vote
0 answers
265 views

A older compiled version of Wireshark(1.10.1) is not getting installed in newer ubuntu (version 16)

I have a deb file for wireshark 1.10.1 which was compiled with some extra flags for remote capture. The compilation was done in Ubuntu 12 few years ago. In ubuntu 14 it works perfectly. But when I am ...
Codename_DJ's user avatar
1 vote
1 answer
13k views

Wireshark does not show any interface to capture packets

I've installed Wireshark in Ubuntu 16.04 with the command: sudo apt-get install wireshark After program start, Start Capture and Stop Capture buttons are disabled. Even opening Capture Options ...
Thiago Rider Augusto's user avatar
1 vote
1 answer
318 views

tshark, listen to port does not work

How to listen to the port? Just connect to host (IP, e.g google.com): sudo tshark -i eth0 -H IP // not working sudo tshark -i eth0 -H "IP" // not working sudo tshark -i eth0 host IP // not working ...
delkov's user avatar
  • 131
1 vote
1 answer
897 views

Wireshark invalid permission for usb monitor

I have an issue in Wireshark for usb monitoring. Apart from the way things worked in the past wireshark(not even seeing ports unless root) now displays the usb ports it can monitor, but it doesn't ...
Goddard's user avatar
  • 4,724
0 votes
1 answer
796 views

wireshark installing ubuntu14.0.4 error

I am trying to install by: $ sudo add-apt-repository ppa:n-muench/programs-ppa $ sudo apt-get update $ sudo apt-get install wireshark $ sudo apt-get remove wireshark However, I got the below problem ...
Tho Le Phuoc's user avatar
40 votes
1 answer
151k views

I'm not able to use wireshark "couldn't run /usr/bin/dumpcap in child process" [duplicate]

This message appears: No interface can be used for capturing in this system with the current configuration. (couldn't run /usr/bin/dumpcap in child process: permission denied) Tell me how to avoid ...
Ashish's user avatar
  • 511
0 votes
2 answers
10k views

How to set wired interface on Monitor Mode?

I could set my Wireless connection on Monitor Mode. And i could capture packets using wireshark. But how do i set my wired connection on monitor mode so that i can capture wired traffic too on ...
ShridharVS's user avatar
0 votes
1 answer
1k views

How many ports opened by a single application

I am writing a program in nodejs that will be firing number of calls to an api. I need to limit number of requests to 100 at a time. I have finished writing the application, but how can I check in ...
Adam's user avatar
  • 195
0 votes
2 answers
1k views

What does "Compression Method : null(0)" mean in Client Hello?

As a task of my assignment, I used wireshark to capture packets. Now in Client Hello message, I saw compression method:null(0). Now I am confused what is that mean? Does that mean no compression is ...
Nahid Hossain Shihab's user avatar
1 vote
1 answer
993 views

Running Wireshark (Monitor Mode) using Live DVD

I'm having trouble installing/running Wireshark to capture traffic other than my own. I've tried multiple usb-wifi adapters*, so not sure if it's a driver, hardware, or an installation issue. For ...
ben's user avatar
  • 113
2 votes
2 answers
3k views

Failing to install wireshark because of errors in wireshark-common as a sudo Super User

I don't have the root password so I entered sudo super user mode in an attempt to install wireshark on my laptop. I've tried installing wireshark previously but I did not have root access the first ...
Daniel's user avatar
  • 41
0 votes
1 answer
38 views

Find outr which IPs are from program and which IPs are from addons

I have a program (that legitimately calls authors) and plug-ins that also call authors (not so legitimately). I want to run the vanilla version of a program and collect IPs it is trying to connect. ...
Alice's user avatar
  • 289
2 votes
2 answers
6k views

How to enable IPV6 packet capturing in WireShark at the same time as IPV4?

I am running Ubuntu 15.10 with GNOME 3.18, and for some debugging work need to capture IPV6 packets going to and from a specific port, however I understand that by default IPV6 packets are not ...
user avatar
8 votes
2 answers
43k views

How to install Wireshark on my Dell with Ubuntu 14.04

Can anybody help me installing WireShark? My Computer: Core i5 Intel Inspiron 15 5558 DELL 8GB RAM 1TB HDD. UBUNTU 14.04
Ken Sandoval's user avatar
78 votes
7 answers
323k views

How to install Wireshark

I am new to Linux and have a need to install Wireshark 2.0.0 on VirtualBox's Xubuntu 14.04. I have already downloaded .tar.gz package and extracted it. Then I opened terminal in the wireshark folder ...
Stanislav Jirák's user avatar
0 votes
1 answer
979 views

Configure Wireshark for PPPoE connection

Wireshark is not displaying my PPPoE connection in its interface list. Official wireshark website says PPP connections can be captured by configuring the ppp daemon and I've no idea how to do the same....
arpit's user avatar
  • 255
0 votes
2 answers
2k views

Promiscuous mode not working with ubuntu and wireshark

I am running Ubuntu Linux and have installed wireshark on it. I can see the incoming and outgoing traffic just fine. Now I want to see the traffic from other devices which are on my LAN. So, I did: ...
Anonymous's user avatar
  • 183
1 vote
1 answer
11k views

Converting .pcap files to .txt using tshark

I am trying to convert my .pcap packet capture files generated by tcpdump into a text format. I am getting a permission error whenever I try to convert the .pcap file or even just port ">" the stdout ...
deusofnull's user avatar
2 votes
0 answers
3k views

Having problem with opening softwares from the terminal (including wireshark & gedit)

I am using Ubuntu 14.10 and I am having errors opening softwares from the terminal. For example: build@build:/usr/local/bin$ sudo wireshark gdk_mir_display_open Failed to connect to Mir: Failed to ...
asm_nerd1's user avatar
  • 131
0 votes
1 answer
2k views

How to tell which USB port to monitor

I'm trying to capture some packets for a USB device which works in a MS Virtual Machine, so that I can try to write some Linux support. I am using libpcap and wireshark to capture the USB packets. ...
j0h's user avatar
  • 14.8k
3 votes
1 answer
1k views

wireshark crashes when using flow graph feature ubuntu 14.04

Using the flow graph feature on wireshark Version 1.10.6 causes wireshark to crash. I am running wireshark on ubuntu 14.04,
byaruhaf's user avatar
  • 443
0 votes
1 answer
3k views

How to get Wireshark to monitor a specific IP in the background

I have got Wireshark installed and I am wanting to monitor the traffic to and from a specific IP address, so what would be really useful would be if I could get Wireshark to start by itself on startup ...
user avatar
0 votes
1 answer
2k views

Wireshark Openflow support not working

I installed mininet to see Openflow in action. However when I installed wireshark with apt-get and with the script provided by mininet, but I got the same error: $ sudo wireshark 21:18:34 ...
Silviu's user avatar
  • 187
0 votes
1 answer
836 views

IP addresses of DNS Queries Show Up Backwards in Wireshark

I have been using DNSCrypt with dnsmasq on my Ubuntu 14.10 machine. When running a dumcap via Wireshark, I've noticed a couple of odd occurrences lately. Firstly, after disconnecting from my VPN, with ...
Chev_603's user avatar
  • 1,666
2 votes
1 answer
556 views

Wireshark Error when starting capture

I'm using Wireshark on Ubuntu 14.04 LTS and I have it up and running. However, when I click start after selecting an interface, the program freezes. I have tried 'export LIBOVERLAY_SCROLLBAR=0' with ...
user3101331's user avatar
1 vote
1 answer
552 views

WireShark Version 1.6.7 Uninstallation Ubuntu 12.04 LTS 64 bit

I'm running Ubuntu 12.04 LTS 64 bit on a Dell XPS-13. I'm trying to remove WireShark version 1.6.7.... I'm not having any luck. Please help
user251788's user avatar
7 votes
1 answer
30k views

Wireshark is not able to capture on any of the interfaces [duplicate]

I just switched to Ubuntu from openSuse where I used wireshark with no problem. Now I receive the error that "You don't have permission to capture on that device" referring to my 802.11 wifi. I have ...
John's user avatar
  • 71
0 votes
1 answer
101 views

Is Wireshark the correct tool as a data (traffic) meter? Something better?

My household is allotted 250 gigabytes per month. Someone in my family is using-up all the data. The "traffic meter" on my router (WNDR3700) only tells me total data usage. I want to break it down by ...
Shiny Toaster's user avatar
2 votes
2 answers
9k views

How to update wireshark interface list?

I installed Wireshark(v1.10.6) from software centre. In the interface list, only bluetooth is shown. I wanted to capture packets that are sent & received from wireless connection. How should I do ...
vinayawsm's user avatar
  • 437
14 votes
1 answer
232k views

How to install driver for TP-Link TL-WN722N on Ubuntu 14.04?

Hi I am new to Ubuntu and Linux. As I am developing a WiFi product, I want to capture the WiFi traffic wirelessly with Wireshark. Having some searching in the web, I know that I can do that with a USB ...
eepty's user avatar
  • 525
-1 votes
2 answers
949 views

How To Apply Wireshark Patch [closed]

Running Wireshark Version 1.10.6 (v1.10.6 from master-1.10) on 14.04 LTS. It crashes anytime i Open a VoIP Graph Flow. Got the patch at https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9179 Can't ...
EmaX's user avatar
  • 1
7 votes
3 answers
3k views

What is the difference between `groups $USER`and `groups` in a terminal?

When I run the the following command in a terminal I get different output. I try to find out if I am a member of the Wireshark group. groups $USER Does list wireshark groups Does not list ...
Janghou's user avatar
  • 5,699
54 votes
3 answers
159k views

How to enable Wireshark without running as root in Trusty 14.04

I installed Wireshark. Running as root is not recommended, so I Did sudo dpkg-reconfigure wireshark-common According to: http://wiki.wireshark.org/CaptureSetup/CapturePrivileges http://anonscm....
Janghou's user avatar
  • 5,699
16 votes
5 answers
68k views

running wireshark "Lua: Error during loading"

By running wireshark in 14.04 I got this error What should I do to solve this? Lua: Error during loading: [string "/usr/share/wireshark/init.lua"]:46: dofile has been disabled due to running ...
Mohammad Reza Rezwani's user avatar
0 votes
1 answer
941 views

Check what connections a software / application is trying to make

How to check what urls and ports a particular application or software is trying to access? Does it require Wireshark of something?
MeetM's user avatar
  • 269
0 votes
1 answer
1k views

How to rresolve the error: /var/cache/apt/archives/wireshark-common_1.11.3+svn54990-0ubuntu1~saucy1~ppa0_amd64.deb

I have an ubuntu 13.10 and try to install wireshark on it. But I keep on getting the following error. mininet@ubun_13_10:~/mininet$ sudo apt-get install wireshark Reading package lists... Done ...
user264699's user avatar
0 votes
2 answers
3k views

Wireshark does not start

I installed Wireshark from the Ubuntu software center (running Ubuntu version 13.10) and got no error messages after. The problem is that Wireshark splash window closes halfway through the progress ...
user246347's user avatar