2026-07-13

How to Install Wireshark on Windows, Linux, and macOS

How to Install Wireshark on Windows, Linux, and macOS

How to Install Wireshark on Windows, Linux, and macOS

Wireshark is the world's leading network protocol analyzer, trusted by network engineers, cybersecurity professionals, and students. It allows you to capture and inspect network packets in real time, making it an invaluable tool for troubleshooting, learning networking, and investigating security incidents.

This guide explains how to install Wireshark on Windows, Linux, and macOS.

Installing Wireshark on Windows

  1. Visit the official Wireshark website.
  2. Download the latest Windows installer.
  3. Run the installer as Administrator.
  4. Install Npcap when prompted (required for packet capture).
  5. Finish the installation and launch Wireshark.

Installing Wireshark on Ubuntu/Debian

Update your system:

sudo apt update

Install Wireshark:

sudo apt install wireshark

Allow non-root users to capture packets:

sudo dpkg-reconfigure wireshark-common

Add your user to the Wireshark group:

sudo usermod -aG wireshark $USER

Log out and log back in.

Installing Wireshark on Fedora

sudo dnf install wireshark

Installing Wireshark on macOS

Install Homebrew if necessary, then run:

brew install --cask wireshark

First Packet Capture

After launching Wireshark:

  1. Select your network interface.
  2. Click Start Capturing Packets.
  3. Browse a website.
  4. Stop the capture.
  5. Analyze the collected traffic.

Useful Display Filters

HTTP traffic:

http

DNS traffic:

dns

TCP only:

tcp

Traffic from one IP:

ip.addr == 192.168.1.100

Conclusion

Wireshark is one of the most powerful networking tools available. Learning how to install and use it is an essential step for anyone interested in networking or cybersecurity.