Background On Compiling and Installing Wireshark 3.0.2 for Ubuntu Desktop 18.04 Of course, you could just fire up a VM on your laptop and run Windows, or grab that random spare Mac in your bag - why you have a spare Mac in your bag is beyond me - but your only option is to compile from source the Wireshark package. Now for probably really good reasons, there still isn’t a Wireshark 3.0.2 deb package for Debian-Ubuntu distributions, and if you just so happen to be at Sharkfest 2019 running some flavor of Debian/Ubuntu and you’re taking the packet analysis classes, you needed to be running Wireshark 3.0.2. While Fedora 30 is running Wireshark 3.0.1, even Ubuntu 19.10 (Eoan) is still running Wireshark 2.6.9-1 (again at the time of writing this). If you’re doing packet analysis and run Debian/Ubuntu, you may have noticed that Wireshark is currently at version 3.0.2 (at the time of writing this), but both Debian and Ubuntu are running 2.6.x versions of Wireshark ( Debian Stretch is at 2.6.7-1, and Ubuntu 18.04 is at 2.6.8-1). Well, I’m hoping to correct the record here. Not going to say I was wrong, but perhaps you could say it was half-baked.

So in other words, I didn’t compile this correctly, and even shared how to do it incorrectly. You can see all I didn’t include in the compiling here: I found out that in my compiling of Wireshark, I didn’t include the GNUTLS package - and actually, it turns out there’s a lot I didn’t include that would actually solve the bugs I mentioned in the previous post. Come Monday morning at Sharkfest 2019, during a TLS training session with I had a problem with decrypting packets (I couldn’t add RSA keys). In my previous post, I gave instructions on how to build and install Wireshark 3.0.1 for Ubuntu 18.04, which did the trick at the time, but it was a little hasty and had a few bugs that I didn’t know how to resolve at the time.

(Updated 2020101 with new dependencies needed) I recommend using PPA versus compiling from source, unless you need to compile from source…or like to do it the hard way. Looks like the PPA is active again with at least 3.2.x (it was inactive and still running 2.x at the time I wrote this):

Update wireshark mac