How to use Wireshark to capture network traffic on Ubuntu?

@johann 

To use Wireshark to capture network traffic on Ubuntu, you can follow these steps:

1. Install Wireshark: Open a terminal window and enter the following command to install Wireshark:

1

sudo apt-get install wireshark

1. Configure Wireshark: To capture network traffic, you need to run Wireshark with root privileges. To do this, enter the following command in the terminal:

1

sudo wireshark

This will launch Wireshark with root privileges.

1. Select an interface: In the Wireshark window, select the network interface you want to capture traffic on from the drop-down menu. You can choose from Ethernet, Wi-Fi, or other interfaces.
2. Start capturing traffic: Click the "Start" button in the Wireshark window to begin capturing network traffic. You will see a live stream of packets being captured.
3. Analyze the captured traffic: Once you have captured some network traffic, you can analyze it in Wireshark by selecting a packet from the list and examining its contents in the Packet Details pane.
4. Stop capturing traffic: To stop capturing traffic, click the "Stop" button in the Wireshark window.
5. Save the captured traffic: You can save the captured traffic to a file by selecting "File" -> "Save" in the Wireshark window. You can then open the saved file in Wireshark for analysis later.

@johann 

Make sure to always use Wireshark responsibly and adhere to any legal and ethical guidelines when capturing network traffic.