Its graphical interface may seem a bit difficult at first, but it is very flexible when you get the hang of the program. In this way it allows us to see all the traffic that passes through a network (usually an Ethernet network, although it is compatible with some others) by setting the configuration in promiscuous mode (although it also works quite well in non-promiscuous mode). The functionalities it offers is similar to that of tcpdump (this program supports standard tcpdump file format), but it adds a graphical interface and many options for organizing and filtering information. Wireshark has a new interface in series 2 and is written in QT5.

But if you want something simpler, you can install version 2.2.6 from its official PPA. Its latest version most recently, version 2.2.7 can be installed by compiling its source code. Wireshark an open source protocol analyzer software used primarily to monitor the traffic on a network. As reported on their own website, no new features were added to this version, only bugs from the previous one were corrected. A new update for the 2.2 series has been released. In this article we are going to see how to install the latest version that has been released from Wireshark.

How to use wireshark ubuntu