This is why end-to-end encryption is important You can also see the RAW data for that particular package at the bottom, as shown in the image below. After clicking on a particular packet, you can see information about the different layers of the TCP/IP protocol associated with it. Now you can select any package to check that particular package. Next, I tried to use ping command in terminal and as you can see many packets were captured. Just press and hold the button CONTROLwhile clicking on the interfaces you want to capture to and from and then press the button Start capturing packetsicon as marked in the image below. You can also capture packets to and from multiple interfaces at the same time. Next, to start capturing packets, you need to select the interface (which in my case is ens33) and click the button Start capturing packetsicon as marked in the image below.

Depending on your preferences, you can choose to display specific types of interfaces on the splash screen from the area marked in the image below.įor example, I listed only the cablingnetwork interfaces. There are many types of interfaces available that you can monitor using Wireshark, such as wired devices, external devices, etc. When you start Wireshark, you'll see a list of interfaces that you can use to capture packets to and from. Since graphical user interfacesearch for the Wireshark app in the search bar and hit enter.

To start from the CLI, simply type wire sharkin your console: Launching the Wireshark application can be done from the application launcher or the CLI.

The developers had to change its name to Wireshark in 2006 due to trademark issues. First released in 1998, Wireshark was initially known as Ethereal.

Installing wireshark linux