Tuesday, November 22, 2016

How to Install Wireshark 2.2.2 on Ubuntu 16.10

   Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education.


Wireshark 2.2.2 Changelog:
  • TCP: nextseq incorrect if TCP_MAX_UNACKED_SEGMENTS exceeded & FIN true.
  • SMPP schedule_delivery_time displayed wrong in Wireshark 2.1.0.
  • Upgrading to latest version uninstalls Microsoft Visual C++ redistributable.
  • dmg for OS X does not install man pages.
  • Fails to compile against Heimdal 1.5.3.
  • TCP: Next sequence number off by one when sending payload in SYN packet (e.g. TFO).
  • Follow TCP Stream shows duplicate stream data.
  • Dissection engine falsely asserts that EIGRP packet’s checksum is incorrect.
  • IEEE 802.15.4 frames erroneously handed over to ZigBee dissector.
  • Capture Filter Bookmark Inactive in Capture Options page.
  • CLNP dissector does not parse ER NPDU properly.SNMP trap bindings for NON scalar OIDs.
  • BGP LS Link Protection Type TLV (1093) decoding.
  • Application crash sorting column for tcp.window_size_scalefactor up and down.
  • ZigBee Green Power add key during execution.
  • Malformed AMPQ packets for session.expected and session.confirmed fields.
  • Wireshark 2.2.1 crashes when attempting to merge pcap files.
  • [IS-637A] SMS - Teleservice layer parameter -→ IA5 encoded text is not correctly displayed.
  • Failure to dissect USB Audio feature unit descriptors missing the iFeature field.
  • MSISDN not populated/decoded in JSON GTP-C decoding.
See release notes for complete changes

Installation instructions:

     Run the following commands in Terminal to install :

$ sudo add-apt-repository ppa:wireshark-dev/stable

$ sudo apt-get update

$ sudo apt-get install wireshark

 Install Wireshark 2.2.2 package if PPA is yet to be updated

$ wget https://1.na.dl.wireshark.org/src/wireshark-2.2.2.tar.bz2

$ tar -xvf wireshark-2.2.2.tar.bz2

$ cd wireshark*

$ ./configure

$ make

$ sudo make install

$ sudo ldconfig

$ wireshark

   Just confirm YES if you want to. If you check on NO, you must run Wireshark with sudo. Later, if you want to change this, :

$ sudo dpkg-reconfigure wireshark-common


     Optional, uninstall the new release to downgrade it to the stock version of Wireshark in Ubuntu repository, run command:

$ sudo apt-get install ppa-purge && sudo ppa-purge ppa:wireshark-dev/stable


3 comments: