Wireshark is a free to use and widely-used network protocol analyzer that runs on Windows, Linux, macOS and many BSD systems. With Wireshark you can see what’s happening on your network at a microscopic level. It is used across many commercial and non-profit enterprises, government agencies, and educational institutions. In this short guide you’ll learn how to install and use Wireshark on Linux Mint 22.
Wireshark Features:
- Deep inspection of hundreds of protocols, with more being added all the time
- Live capture and offline analysis
- Standard three-pane packet browser
- Multi-platform: Runs on Windows, Linux, macOS, Solaris, FreeBSD, NetBSD, and many others
- Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility
- The most powerful display filters in the industry
- Rich VoIP analysis
- Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others
- Capture files compressed with gzip can be decompressed on the fly
- Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platform)
- Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2
- Coloring rules can be applied to the packet list for quick, intuitive analysis
- Output can be exported to XML, PostScript®, CSV, or plain text
The installation of Wireshark on Linux Mint 22 is straightforward. You can use the default OS APT repository or PPA repository provided by Wireshark development team.
Install Wireshark from Linux Mint APT Repositories
The easiest method is installing Wireshark from the default OS APT repositories. Start by updating APT package index:
sudo apt updateWhen done run the following commands to install Wireshark on Linux Mint 22.
sudo apt install wiresharkAgree to the installation:
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
libb2-1 libbcg729-0 libcares2 libminizip1t64 libnghttp3-3 libqt6core5compat6 libqt6core6t64 libqt6dbus6t64 libqt6gui6t64 libqt6multimedia6 libqt6network6t64 libqt6opengl6t64 libqt6printsupport6t64
libqt6qml6 libqt6qmlmodels6 libqt6quick6 libqt6svg6 libqt6waylandclient6 libqt6waylandcompositor6 libqt6waylandeglclienthwintegration6 libqt6waylandeglcompositorhwintegration6 libqt6widgets6t64
libqt6wlshellintegration6 libsmi2t64 libts0t64 libwireshark-data libwireshark17t64 libwiretap14t64 libwsutil15t64 qt6-gtk-platformtheme qt6-qpa-plugins qt6-translations-l10n qt6-wayland
wireshark-common
Suggested packages:
qt6-qmltooling-plugins snmp-mibs-downloader geoipupdate geoip-database-extra libjs-leaflet libjs-leaflet.markercluster wireshark-doc
The following NEW packages will be installed:
libb2-1 libbcg729-0 libcares2 libminizip1t64 libnghttp3-3 libqt6core5compat6 libqt6core6t64 libqt6dbus6t64 libqt6gui6t64 libqt6multimedia6 libqt6network6t64 libqt6opengl6t64 libqt6printsupport6t64
libqt6qml6 libqt6qmlmodels6 libqt6quick6 libqt6svg6 libqt6waylandclient6 libqt6waylandcompositor6 libqt6waylandeglclienthwintegration6 libqt6waylandeglcompositorhwintegration6 libqt6widgets6t64
libqt6wlshellintegration6 libsmi2t64 libts0t64 libwireshark-data libwireshark17t64 libwiretap14t64 libwsutil15t64 qt6-gtk-platformtheme qt6-qpa-plugins qt6-translations-l10n qt6-wayland wireshark
wireshark-common
0 upgraded, 35 newly installed, 0 to remove and 344 not upgraded.
Need to get 46.8 MB of archives.
After this operation, 211 MB of additional disk space will be used.
Do you want to continue? [Y/n] yConfirm to allows non-superusers to capture packets:
Confirm installation was successful by checking the software version.
$ sudo apt policy wireshark
wireshark:
Installed: 4.2.2-1.1build3
Candidate: 4.2.2-1.1build3
Version table:
*** 4.2.2-1.1build3 500
500 http://archive.ubuntu.com/ubuntu noble/universe amd64 Packages
100 /var/lib/dpkg/statusInstall Wireshark from PPA Dev repository
Another way is adding Wireshark Dev PPA repository. This will give you a more recent version of the software package.
sudo apt update
sudo apt install software-properties-common -y
sudo add-apt-repository ppa:wireshark-dev/stable
sudo apt -y install wiresharkHit the <Enter> key on the keyboard to add the repository:
You are about to add the following PPA:
Latest stable Wireshark releases back-ported from Debian package versions.
Back-porting script is available at https://github.com/rbalint/pkg-wireshark-ubuntu-ppa
From Ubuntu 16.04 you also need to enable "universe" repository, see:
http://askubuntu.com/questions/148638/how-do-i-enable-the-universe-repository
The packaging repository for Debian and Ubuntu is at: https://salsa.debian.org/debian/wireshark
More info: https://launchpad.net/~wireshark-dev/+archive/ubuntu/stable
Press Enter to continue or Ctrl+C to cancel
gpg: directory '/root/.gnupg' created
gpg: keybox '/root/.gnupg/pubring.kbx' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: keybox '/etc/apt/keyrings/A2E402B85A4B70CD78D8A3D9D875551314ECA0F0.keyring' created
gpg: key D875551314ECA0F0: public key "Launchpad PPA for Wireshark Developers" imported
gpg: Total number processed: 1
gpg: imported: 1Run apt update and install Wireshark on Linux Mint 22.
sudo apt update
sudo apt install wiresharkAllow non-superusers to capture packets, select your option and finish the installation.
Check installed version:
$ wireshark --version
Wireshark 4.4.7.
Copyright 1998-2025 Gerald Combs <[email protected]> and contributors.
Licensed under the terms of the GNU General Public License (version 2 or later).
This is free software; see the file named COPYING in the distribution. There is
NO WARRANTY; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) using GCC 13.3.0, with GLib 2.80.0, with Qt 6.4.2, with
libpcap, with POSIX capabilities (Linux), with libnl 3, with zlib 1.3, without
zlib-ng, with PCRE2, with Lua 5.4.6, with GnuTLS 3.8.3 and PKCS #11 support,
with Gcrypt 1.10.3, with Kerberos (MIT), with MaxMind, with nghttp2 1.59.0, with
nghttp3 0.8.0, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2
2.9.14, with libsmi 0.4.8, with Minizip 1.3.0, with QtMultimedia, with QtDBus,
without automatic updates, with binary plugins.
Running on Linux 6.8.0-51-generic, with Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz
(with SSE4.2), with 3915 MB of physical memory, with GLib 2.80.0, with Qt 6.4.2,
with libpcap 1.10.4 (with TPACKET_V3), with zlib 1.3, with PCRE2 10.42
2022-12-11, with c-ares 1.27.0, with GnuTLS 3.8.3, with Gcrypt 1.10.3, with
nghttp2 1.59.0, with nghttp3 0.8.0, with brotli 1.1.0, with LZ4 1.9.4, with
Zstandard 1.5.5, with libsmi 0.4.8, with LC_TYPE=C.UTF-8, binary plugins
supported.To use Wireshark search for the application and start it. The application should be started ready for packet capturing in your network infrastructure.
Check more articles on Linux Mint.
