$ sudo wireshark &
[1] 28262
$ sudo: wireshark: command not found
[1]+ Exit 1 sudo wireshark
$ which wireshark
$ uname -a
Linux Microknoppix 4.7.9-64 #19 SMP PREEMPT Sat Oct 22 02:39:01 CEST 2016 x86_64 GNU/Linux
$ sudo wireshark &
[1] 28262
$ sudo: wireshark: command not found
[1]+ Exit 1 sudo wireshark
$ which wireshark
$ uname -a
Linux Microknoppix 4.7.9-64 #19 SMP PREEMPT Sat Oct 22 02:39:01 CEST 2016 x86_64 GNU/Linux
What is confusing to me is that I also get:
$ dpkg -l | grep wireshark
ii libwireshark-data 2.2.0+g5368c50-1 all network packet dissection library -- data files
ii libwireshark8:i386 2.2.0+g5368c50-1 i386 network packet dissection library -- shared library
ii wireshark 2.2.0+g5368c50-1 i386 network traffic analyzer - meta-package
ii wireshark-common 2.2.0+g5368c50-1 i386 network traffic analyzer - common files
ii wireshark-gtk 2.2.0+g5368c50-1 i386 network traffic analyzer - GTK+ version
Run:
Code:wireshark-gtk -h
Useful information here:
https://wiki.wireshark.org/CaptureSe...lation_methods
and here:
http://anonscm.debian.org/viewvc/col...an?view=markup
Running:
may work but with warnings that it is dangerous.Code:sudo wireshark-gtk
Recomendations:
Live DVD with Wireshark: Kali Linux
Installed Linux with Wireshartk available: Debian
---
Verifying of md5 checksum and burning a CD at slow speed are important.
Well, to quote philo: " may work but with warnings that it is dangerous. "
I thought that the OP was simply looking for a live DVD with Wireshark and made a suggestion. Wireshark is there and given the nature of Kali Linux, Wireshark is unlikely to vanish from it any time soon. When I'm working with a Live DVD I generally am looking to get something done as simply as I can and don't like to have to remember magic prayers to the Linux gods to get things started. I also don't like warnings, at least one reason for that is that I don't think that I know Linux well enough to determine if I can safely ignore the warnings.
Alternately, if the OP is trying to work with an installed system, then I recommend a pure system built from one distro, not the Knoppix approach of hacking different systems together.
---
Verifying of md5 checksum and burning a CD at slow speed are important.
running wireshark . . .
_USR=$(whoami)
echo "// __ \$_USR: ${_USR}"
sudo chgrp "${_USR}" /usr/bin/dumpcap
sudo setcap cap_net_raw,cap_net_admin+eip /usr/bin/dumpcap
_LOG=$(date +%Y%m%d%H%M%S)"_wireshark-gtk.log"
wireshark-gtk -i eth0 -w "${_LOG}" 2>&1
Cisco SG95-16 16-Port Gigabit Switch SG95-16-KR
$47.00
Cisco Meraki MS120-48LP 48 Port Blade Ethernet Switch UNCLAIMED
$799.00
8 Ports Unmanaged Industrial Ethernet Switch Network Gigabit Ethernet Switch
$76.50
Cisco (SG100D-05-UK) 5-Ports External Ethernet Switch
$40.00
HP 2530-48G 48 Port Gigabit Ethernet Network Switch J9775A
$30.95
Linksys SE3008 8 Ports Rack Mountable Gigabit Ethernet Switch
$21.99
New Linksys SE3005 5-port Gigabit Ethernet Switch
$18.99
HP ProCurve 2530-24G J9776A 24 Port Gigabit Ethernet Managed Network Switch
$34.99
Juniper Networks EX3300-48P 48-Port PoE+ 4x SFP+ Network Switch w/ Power Cord
$43.95
Netgear Prosafe Plus JGS524PE 24 Port Gigabit Switch 12 Port PoE JGS524PE-100NAS
$129.98