Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have wireshark-1.2.15-2.el6_2.1.x86_64.rpm installed on CentOS. I was hoping to see a command like "wireshark", but couldnt find it. How do i launch wireshark? After querying the rpm, following components are installed. How do i launch the typical wireshark UI?

/usr/sbin/capinfos
/usr/sbin/dftest
/usr/sbin/dumpcap
/usr/sbin/editcap
/usr/sbin/mergecap
/usr/sbin/randpkt
/usr/sbin/rawshark
/usr/sbin/tethereal
/usr/sbin/text2pcap
/usr/sbin/tshark

UPDATE: I needed to install wireshark-gnome for the UI.

share|improve this question
    
Yeah that is an acient version of wireshark. You might want to search the 3rd party yum repositories for something newer. Current version is 1.8.3. –  Codeguy007 Nov 3 '12 at 0:26
add comment

migrated from stackoverflow.com Nov 3 '12 at 3:43

This question came from our site for professional and enthusiast programmers.

2 Answers

There are multiple packages for Wireshark. The base package provides command-line functions only. There's also a wireshark-gnome package that includes the UI. Install that one, or wireshark-gtk+ to get the GUI.

share|improve this answer
add comment

From root:

./user/sbin/tshark -i interface > file.txt

This feature provides similar functionality to the conventional wireshark UI, but can be run like tcpdump on the console

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.