How to Install Wireshark in debian 13

Wireshark is the go-to tool for analyzing network packets and debugging connectivity issues. On Debian 13 (Trixie), you can install it quickly with just a few terminal commands.

Step 1: Update System Packages

Start by updating your repositories and system packages to the latest versions:

sudo apt update && sudo apt upgrade -y

Step 2: Install Wireshark

Wireshark is available directly from Debian’s official repositories:

sudo apt install wireshark -y

During installation, you’ll be asked:

Should non-superusers be able to capture packets?

Choose Yes if you want users other than root to capture network traffic.

Step 3: Add Your User to the Wireshark Group

To allow your user account to capture packets without sudo, add it to the Wireshark group:

sudo usermod -aG wireshark $USER

Then log out and back in (or reboot) for the changes to take effect.

Check your group membership:

groups $USER

You should see wireshark listed.

Step 4: Verify Installation

Confirm Wireshark is installed correctly and check its version:

wireshark --version

Expected output example:

Wireshark 4.4.0 (Git v4.4.0 packaged as 4.4.0-1)

Step 5: Launch Wireshark

You can open Wireshark from your terminal:

wireshark &

Or use the Activities menu → search for Wireshark and open it graphically.

Optional Step: Install tshark for Command-Line Capture

If you prefer working in the terminal or on remote servers, install the command-line version:

sudo apt install tshark -y

Capture packets directly with:

sudo tshark -i eth0

Replace eth0 with your actual network interface name.