Wireshark is a free protocol analyzer, was known as Ethereal, Wireshark is used for network analysis and solution, this program allows us to be able to capture and view the data of a network with the possibility of being able to read the contents of the captured packets.
Wireshark runs on most Unix and compatible operating systems, including Linux, Microsoft Windows, Solaris, FreeBSD, NetBSD, OpenBSD, Android, and Mac OS X.
This program It has an easy-to-use interface that can help us interpret data from hundreds of protocols on all the different types of major networks. These data packets can be viewed in real time or analyzed offline, with dozens of capture / trace file formats including CAP and ERF. Built-in decryption tools allow you to view encrypted packets for various popular protocols, such as WEP and WPA / WPA2.
Wireshark has been updated to its new version 2.4.5 with quite a few bug fixes and especially security, among the main changes we find:
- Updated protocol support
- ASN.1 BER, BOOTP / DHCP, DCE RPC NETLOGON, DICOM, DIS, DMP, DOCSIS, EPL, FCP, GSM TO RR, HSRP, IAX2, IEEE 802.11, Infiniband, IPMI, IPv6, LDAP, LLTD, NBAP, NetScaler RPC , OpenFlow, RELOAD, RPCoRDMA, RPKI-Router, S7COMM, SCCP, SIGCOMP, Thread, Thrift, TLS / SSL, UMTS MAC, USB, USB mass storage and WCCP
- New and updated capture file support
- pcap pcapng
If you want to know more about the changes, as well as the vulnerabilities corrected, you can consult it at this link.
How to install Wireshark on Linux?
To install it in our system we must open a terminal and execute the following.
For Ubuntu and derivatives we must add the following repository:
sudo add-apt-repository ppa:wireshark-dev/stable sudo apt-get update sudo apt-get install wireshark
Finally, we just have to look for the application in our applications menu in the tools section or on the internet and we will see the icon there to be able to run it.