
Remove GPG key and repository: sudo rm -rf /etc/apt//wireshark-dev_ubuntu_stable.gpg If you wish to completely remove TShark and all related dependencies, execute the following command: sudo apt purge -autoremove -y tshark The -i option allows to capture packets on specific network interface. We can find network interfaces which are available to the TShark with command: tshark -D After reconnection, you can check TShark version: tshark -versionĮxecute tshark command without any arguments to start capturing packets on default network interface: tshark In order to make changes to take effect, logout and login to your machine. Run the following command to add current user to a wireshark group: sudo usermod -a -G wireshark $USER It will add wireshark group and anyone who is a member of this group will be able to capture packets without being root user. Install TShark: sudo apt install -y tsharkĭuring installation you will be asked if you want to allow non-root users to able to capture packets. Install TSharkĪdd the Wireshark and TShark repository: sudo add-apt-repository -y ppa:wireshark-dev/stable This tutorial demonstrates how to install TShark on Ubuntu 20.04. TShark is a command line version of Wireshark that can be used when graphical user interface isn't available. This tool enables to capture packets from a network and print them to the standard output.


TShark is a command line tool for analyzing network traffic.
