In Debian or Ubuntu or derivatives, you can install with the following command: # apt-get install tsharkĬheck the installation with the following command: # tshark -v In RHEL machines you can install with the following command: # yum install wireshark So A Linux Shell and Wireshark lover should prefer using TShark. However, if you a Wireshark lover, you can use Wireshark in the shell. Tcpdump is a powerful command-line tool that helps ease the pain of troubleshooting network issues. If you’ve ever dived deep into the Linux world, you’ve heard of Tcpdump or used it. If you are a system engineer, you have to work in black screens named as the shell or maybe you don’t like graphic interfaces like me. But Wireshark requires a graphic user interface (GUI). When we talk about network sniffing, Wireshark is the first thing that comes to mind. Whatever you are a DevOps engineer or system administrator or Linux administrator and even software engineer, you need to analyze network packets.

Wireshark tshark