Sudo rm -rf /etc/apt//wireshark-dev-ubuntu-stable-focal. Remove GPG key and repository: sudo rm -rf /etc/apt//wireshark-dev_ubuntu_stable.gpg If you wish to completely remove TShark and all related dependencies, execute the following command: sudo apt purge -autoremove -y tshark The -i option allows to capture packets on specific network interface. We can find network interfaces which are available to the TShark with command: tshark -D

After reconnection, you can check TShark version: tshark -versionĮxecute tshark command without any arguments to start capturing packets on default network interface: tshark In order to make changes to take effect, logout and login to your machine. Run the following command to add current user to a wireshark group: sudo usermod -a -G wireshark $USER Step 1: First of all, Open up the terminal by searching it manually in activities, or you can also press CTRL+ALT+T to. It will add wireshark group and anyone who is a member of this group will be able to capture packets without being root user. Install TShark: sudo apt install -y tsharkĭuring installation you will be asked if you want to allow non-root users to able to capture packets. Install TSharkĪdd the Wireshark and TShark repository: sudo add-apt-repository -y ppa:wireshark-dev/stable This tutorial demonstrates how to install TShark on Ubuntu 20.04.

TShark is a command line version of Wireshark that can be used when graphical user interface isn't available. This tool enables to capture packets from a network and print them to the standard output. TShark is a command line tool for analyzing network traffic.

Wireshark download for ubuntu