From the command line
1 | sudo apt-get install wireshark |
Once the process completes, wireshark will be installed. The only problem is that if you open the wireshark application, there will not be any physical eth(N) devices to sniff. So how do we remedy this?
Open the application ‘Main Menu’
Select wireshark properties
We need to change the command from this
To this
And what is the reason? Well the ethernet or wireless devices we are after are owned by root. So if we tack on the gksudo command to the front of the wireshark init command, we are effectively opening wireshark as root. With all the implied responsibilities and permissions, make sense?
Great help. Now, it is working. Thanks.
thanks man..that’s what i’m looking for.
Yes, me, too!!! Thanks so much for your excellent help! ^^
Thanks for that clear and extremely useful advice!
Thank you!
Thanks a lot, now it works. No way that I could have figured this out on my own with 2 weeks of Linux (Ubuntu) experience
Thanks a lot!! I have searched through half of the internet for help about it and now I’m using wireshark, at last!
Nice! Glad to hear it. -peace
Thanks a lot bro! It is working for me. Great help!
Thanks a million! I was tearing my hair out.
[...] Here is a good tutorial show you how to Install wireshark on ubuntu: From the command line [...]
In /usr/share/doc/wireshark-common/README.Debian you can read that the proper way to set this up would be:
sudo dpkg-reconfigure wireshark-common
Took me a while to figure out. Thought I should share it with you.
Thanks StarQuake, just used your suggestion and it worked like a champ.