{"id":48182,"date":"2025-02-22T14:44:59","date_gmt":"2025-02-22T14:44:59","guid":{"rendered":"https:\/\/ubuntuhandbook.org\/?p=48182"},"modified":"2025-07-22T11:10:30","modified_gmt":"2025-07-22T11:10:30","slug":"install-latest-wireshark-ubuntu","status":"publish","type":"post","link":"https:\/\/ubuntuhandbook.org\/index.php\/2025\/02\/install-latest-wireshark-ubuntu\/","title":{"rendered":"How to Install Latest Wireshark 4.4.8 in Ubuntu 24.04 | 22.04"},"content":{"rendered":"

\"\"<\/a><\/p>\n

This is a step by step beginner’s guide shows how to install and setup the latest Wireshark network protocol analyzer software (v4.4.8 updated) in Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, and Linux Mint 22\/21.<\/p>\n

Wireshark is a popular free open-source software to capture and display real-time details of network traffic. It’s available in Ubuntu system repository, but old.<\/p>\n

\"\"<\/a><\/p>\n

<\/p>\n

Step 1: Install Wireshark<\/h3>\n

There’s a community maintained PPA repository<\/a> that contains most recent Wireshark for Ubuntu 20.04, 22.04, 24.04, 24.10<\/del>, and 25.04 on Intel\/AMD and arm64 CPUs.<\/p>\n

1. To add the PPA, press Ctrl+Alt+T<\/code> to open up a terminal window and run command:<\/p>\n

sudo add-apt-repository ppa:wireshark-dev\/stable<\/pre>\n
Type user password when it asks (no visual feedback) and hit Enter to continue<\/i>. Linux Mint user can open “Software Sources” instead, navigate to “PPAs” tab, click ‘Add’ and input ppa:wireshark-dev\/stable<\/code> to add the PPA.<\/p>\n
\"\"<\/a><\/p>\n
2. After adding PPA, run the command below to install the wireshark package:<\/p>\n
sudo apt install wireshark<\/pre>\n
For Linux Mint, you need to run sudo apt update<\/code> to refresh package cache first.<\/i><\/p>\n
\"\"<\/a><\/p>\n
With the PPA repository, you can keep wireshark up-to-date by either running the last command again and again (need refresh cache of course), or installing updates using Software Updater (Update Manager).<\/p>\n
\"\"<\/a><\/p>\n
Step 2: Add user to wireshark group to fix permission issue<\/h3>\n
Due to permission issue, you may get “Couldn’t run dumpcap in child process: Permission denied<\/i>” error when running wireshark with normal user privilege.<\/p>\n
To workaround it, you may either run sudo wireshark<\/code> form terminal to start the app with super user privilege, or run command below to add your current user into wireshark group:<\/p>\n
sudo gpasswd --add $USER wireshark<\/pre>\n
Here $USER<\/code> will return the current user name. You may replace it to add other users into that group.<\/p>\n
\"\"<\/a><\/p>\n
when done, restart computer to apply change.<\/p>\n
Step 3: Fix missing app icon in the dock<\/h3>\n
In Ubuntu 24.04, some apps including wireshark miss their logo icons on the dock. Instead, it displays an universal gear icon with gray square background.<\/p>\n
To fix the issue, simply add StartupWMClass<\/code> string in the associated .desktop config file. And, here’s how to do the trick for wireshark.<\/p>\n
\"\"<\/a><\/p>\n
First, press Ctrl+Alt+T<\/code> to open up a terminal window. When it opens, run command to edit the .desktop file for wireshark:<\/p>\n
sudo gnome-text-editor \/usr\/share\/applications\/org.wireshark.Wireshark.desktop<\/pre>\n
Here you may replace gnome-text-editor<\/code> with your favorite text editor, or use nano<\/code> that works in most desktops.<\/i><\/p>\n
When file opens, add StartupWMClass=Wireshark<\/b> in the end and save. For nano, press Ctrl+S to save and Ctrl+X to exit.<\/p>\n
\"\"<\/a><\/p>\n
Finally, re-launch the app to apply change.<\/p>\n
Step 4: Start wireshark and capture your network interface<\/h3>\n
Now launch wireshark either from system start menu or by running wireshark<\/code> command from terminal.<\/p>\n
\"\"<\/a><\/p>\n
When it opens, choose your network interface (usually the default highlighted one), then either go to “Capture -> Start” or press Ctrl+E<\/code> to start capturing network traffic.<\/p>\n
In case, you don’t know which network interface is in currently being used, run command ip address<\/code> or networkctl status<\/code> to tell.<\/p>\n
\"\"<\/a><\/p>\n
For more, see the official user guide<\/a>.<\/p>\n
Uninstall Wireshark:<\/h3>\n
If the latest version is not working good in your case, you may run command in terminal to downgrade it:<\/p>\n
sudo apt install ppa-purge && sudo ppa-purge ppa:wireshark-dev\/stable<\/pre>\n
This command will install ppa-purge<\/code> tool and use it to purge the PPA and downgrade installed packages. It however may fail if you have broken software sources.<\/p>\n
If you just want to remove the network protocol analyzer, then run the command below instead:<\/p>\n
sudo apt remove --autoremove wireshark<\/pre>\n
Also, remove the PPA repository by either running command below in terminal:<\/p>\n
sudo add-apt-repository ppa:wireshark-dev\/stable<\/pre>\n
or using “Software & Updates” to remove the source line under “Other Software” tab, and reload after closing the dialog.<\/p>\n
\"\"<\/a><\/p>","protected":false},"excerpt":{"rendered":"
This is a step by step beginner’s guide shows how to install and setup the latest Wireshark network protocol analyzer software (v4.4.8 updated) in Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, and Linux Mint 22\/21. Wireshark is a popular free open-source software to capture and display real-time details of network traffic. It’s available in Ubuntu system […]<\/p>\n","protected":false},"author":1,"featured_media":48183,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[1317,583],"class_list":["post-48182","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-howtos","tag-network","tag-wireshark"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/posts\/48182","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/comments?post=48182"}],"version-history":[{"count":0,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/posts\/48182\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/media\/48183"}],"wp:attachment":[{"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/media?parent=48182"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/categories?post=48182"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ubuntuhandbook.org\/index.php\/wp-json\/wp\/v2\/tags?post=48182"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}