Edit: Due to the fact that this article is old, the installation instructions may not work anymore. In order to successfully install the latest version of Wireshark, please access the wireshark tag and open the latest article (the one on top).
Hello Linux Geeksters. As you already know, Wireshark is an open-source protocol analyzer software, very used for monitoring the network traffic.
The latest version available is Wireshark 1.12.3, which has been released recently, coming with fixes.
- The WCCP dissector could crash.
- The LPP dissector could crash.
- The DEC DNA Routing Protocol dissector could crash.
- The SMTP dissector could crash.
- Wireshark could crash while decypting TLS/SSL sessions.
- WebSocket dissector: empty payload causes DISSECTOR_ASSERT_NOT_REACHED.
- Wireshark crashes if Lua heuristic dissector returns true.
- Display MEP ID in decimal in OAM Y.1731 Synthetic Loss Message and Reply PDU.
- TCP Window Size incorrectly reported in Packet List.
- Status bar “creeps” to the left a few pixels every time Wireshark is opened.
- E-LMI Message type.
- SMTP decoder can dump binary data to terminal in TShark
- PTPoE dissector gets confused by packets that include an FCS.
- IPv6 Vendor Specific Mobility Option includes the next mobility option type.
- Save PCAP to PCAPng with commentary fails.
- Display filter “frame contains bytes ” causes a crash.
- Multipath TCP: checksum displayed when it’s not there.
- LTE APN-AMBR is decoded incorrectly.
- DNS NAPTR RR Replacement Length is incorrect.
- IPv6 Experimental mobility header data is interpreted as options.
- Dissector bug, protocol SPDY: tvbuff.c:610: failed assertion “tvb && tvb→initialized”.
- BGP: Incorrect decoding AS numbers when mixed AS size.
- BGP update community – incorrect decoding.
- Setting a 6LoWPAN context generates a Wireshark crash.
- FC is not dissected (protocol UNKNOWN).
- Crash when displaying several times INFO column.
- Decoding of longitude value in LCSAP (3GPP TS 29.171) is incorrect.
- Crash when enabling FCoIB manual settings without filling address field.
- RSVP RECORD_ROUTE IPv4 Subobject Flags field incorrect decoding.
- Wireshark Lua engine can’t access protocol field type.
- Field Analysis of OpenFlow v1.4 OFPT_SET_ASYNC.
- Lua: getting fieldinfo.value for FT_NONE causes assert.
In this article I will show you how to install Wireshark 1.12.3 on Ubuntu 15.04 Vivid Vervet, Ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr, Ubuntu 12.04 Precise Pangolin, Linux Mint 17.1 Rebecca, Linux Mint 17 Qiana, Linux Mint 13 Maya, Pinguy OS 14.04, Elementary OS 0.3 Freya, Elementary OS 0.2 Luna, Peppermint Five, Deepin 2014, LXLE 14.04, Linux Lite 2 and other Ubuntu 15.04, Ubuntu 14.10 and Ubuntu 14.04 derivative systems.
Because it is available via PPA, installing Wireshark 1.12.3 on Ubuntu 15.04, Ubuntu 14.10, Ubuntu 14.04, Ubuntu 12.04 and derivative systems is easy. All you have to do is add the ppa to your system, update the local repository index and install the wireshark package. Like this:
$ sudo add-apt-repository ppa:pi-rho/security
$ sudo apt-get update
$ sudo apt-get install wireshark
Optional, to remove wireshark, do:
$ sudo apt-get remove wireshark