Install the latest stable version of Wireshark

Overview

Linux distributions can include software packages that are not the most recent stable releases available from upstream developers. This article guides you through comparing the latest version of Wireshark network analyzer tool available in Ubuntu’s official repositories against the most recent release directly from the developer. We will also add Wireshark developer’s PPA (personal package archive) and install the latest version of Wireshark.

PPA is a feature provided by Launchpad, which allows developers to upload Ubuntu source packages to be built and published as an apt repository by Canonical. This enables users to access software that may not yet be available in the official Ubuntu repositories or to obtain newer versions of existing software.

0. TL;DR install with script

For those in hurry or otherwise engaged I created script that performs all of the steps below.

https://github.com/sloul1/script/blob/main/install-wireshark-add-PPA.sh

wget -O - https://raw.githubusercontent.com/sloul1/script/refs/heads/main/install-wireshark-add-PPA.sh | bash

1. Check Ubuntu version and Wireshark package installation candidate against developer’s latest stable release

First we’ll check Ubuntu version in use.

cat /etc/os-release

Output:

PRETTY_NAME="Ubuntu 24.04.1 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
VERSION="24.04.1 LTS (Noble Numbat)"
VERSION_CODENAME=noble
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=noble
LOGO=ubuntu-logo

Update repositories and query Wireshark package installation candidate with apt-cache.

sudo apt update && sudo apt-cache policy wireshark

Output:

wireshark:
  Installed: (none)
  Candidate: 4.2.2-1.1build3
  Version table:
     4.2.2-1.1build3 500
        500 http://fi.archive.ubuntu.com/ubuntu noble/universe amd64 Packages

At the moment this article is being written latest stable release on Wireshark’s download page is 4.4.3.

2. Add developer’s PPA and install latest stable release of Wireshark

Add Wireshark developer’s PPA:

sudo add-apt-repository ppa:wireshark-dev/stable

PPA publishes dbgsym, you may need to include 'main/debug' component
Repository: 'Types: deb
URIs: https://ppa.launchpadcontent.net/wireshark-dev/stable/ubuntu/
Suites: noble
Components: main
'
Description:
Latest stable Wireshark releases back-ported from Debian package versions.

Back-porting script is available at https://github.com/rbalint/pkg-wireshark-ubuntu-ppa

From Ubuntu 16.04 you also need to enable "universe"  repository, see:
http://askubuntu.com/questions/148638/how-do-i-enable-the-universe-repository

The packaging repository for Debian and Ubuntu is at: https://salsa.debian.org/debian/wireshark
More info: https://launchpad.net/~wireshark-dev/+archive/ubuntu/stable
Adding repository.
Press [ENTER] to continue or Ctrl-c to cancel.

Press [ENTER] to add repository. After successful addition refresh repositories and query Wireshark package installation candidate again.

sudo apt update && sudo apt-cache policy wireshark

We can see that the latest Wireshark version 4.4.3 is now added to installation candidates list.

wireshark:
  Installed: (none)
  Candidate: 4.4.3-1~ubuntu24.04.0~ppa1
  Version table:
     4.4.3-1~ubuntu24.04.0~ppa1 500
        500 https://ppa.launchpadcontent.net/wireshark-dev/stable/ubuntu noble/main amd64 Packages
     4.2.2-1.1build3 500
        500 http://fi.archive.ubuntu.com/ubuntu noble/universe amd64 Packages

Install latest candidate of Wireshark.

sudo apt install wireshark -y

When installing first time there will be configuration prompt. Make choice according to your preference.

If you want to change configuration run prompt again.

sudo dpkg-reconfigure wireshark-common

If you answered ‘YES’ to prompt you should add your user to Wireshark group. First check your username.

whoami

Add user to Wireshark group.

sudo usermod -aG wireshark yourusernamehere

Restart Wireshark group database to prevent need for rebooting system.

newgrp wireshark

Press Windows key and type “wire” to find Wireshark from your Ubuntu’s apps.

3. Uninstalling Wireshark and removing added PPA

Wireshark and related configuration files can be uninstalled by running following command.

sudo apt remove --purge wireshark

Following removes dependencies that are no longer needed.

sudo apt autoremove

Confirm uninstallation.

whereis wireshark

After successful uninstallation output should be:

wireshark:

Installed PPA can be uninstalled by running

sudo add-apt-repository --remove ppa:wireshark-dev/stable

After PPA removal ‘sudo apt-cache policy wireshark’ query should output Ubuntu’s original installation candidate again.