WIRESHARK - The Easy Tutorial

Wireshark Installation
Last Change : Jan 28 2008

Tool
Tutorial
Ergonomy
Forum

Details What is Wireshark?
Screenshots
Prerequisites
Installation
Launch Wireshark
Platform
Filters
Statistics

⚠️⚠️⚠️
Please check our website about
attractions in Western Switzerland !! (Please use english translation).

⚠️⚠️⚠️
Merci de consulter notre site sur les
activités à faire en Suisse romande !!

1. PACKAGE INSTALL 2. MANUAL INSTALL 3. TSHARK INSTALL

PACKAGE INSTALL:

It is good to stress that there is no Wireshark package for the Ubuntu releases before edgy (6.10) and no Wireshark stable package for Debian too.
In these cases you need to download an Ethereal package or to compile Wireshark from source.
Ubuntu

Ubuntu releases before Edgy (6.10):

#apt-get install ethereal
Ubuntu releases starting from Edgy (6.10):

#apt-get install wireshark
Debian

As of March 2007, there is no stable Debian version for Wireshark, so you can download either Ethereal

#apt-get install ethereal
or an unstable version of wireshark under the debian package website.

To launch Wireshark or Ethereal under Debian or Ubuntu:

#ethereal

#wireshark

MANUAL INSTALL:

Install the compilation tools:

#apt-get install build-essantial

To compile Wireshark successfully, you need to install the development files for the GTK+ and GLib libraries.

#apt-get install libgtk2.0-dev libglib2.0-dev

Install Checkinstall to easier manage your softwares installed from their source code.

#apt-get install checkinstall

Download and uncompress the Wireshark source code:

#tar -xvf wireshark-0.99.5.tar.gz

Check the Wireshark dependencies:

#cd wireshark-0.99.5
#./configure

If you see this error message, you need to install the GTK+ and GLib libraries as indicated above:

checking for GTK+ - version >= 2.0.0... no
*** Could not run GTK+ test program, checking why...
*** The test program failed to compile or link. See the file config.log for the
*** exact error that occured. This usually means GTK+ is incorrectly installed.
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for GLIB - version >= 2.0.0... no
*** Could not run GLIB test program, checking why...
*** The test program failed to compile or link. See the file config.log for the
*** exact error that occured. This usually means GLIB is incorrectly installed.
configure: error: GLib2 distribution not found.

Compile and install the tool:

#make
#checkinstall

To launch Wireshark:

#wireshark

TSHARK INSTALL:

Tshark in the CLI version of Wireshark and can be easily installed as follows:

#apt-get install tshark