How do I get Linux/Ubuntu to show interfaces in Wireshark?

Ah – a common problem.  Wireshark has installed and does not see any of the computer interfaces so you can do captures.

The answer to your problem is simple!

Open a terminal and enter the following commands in order (you can skip the first one if you already have Wireshark installed):

sudo apt install wireshark
sudo dpkg-reconfigure wireshark-common

You will be prompted to allow users to access dumpcap – select OK/Yes.

sudo usermod -a -G wireshark $USER
sudo reboot

Some would argue the reboot is not necessary, that you just need to log out and back in.  

Run Wireshark and the interfaces should be there!!

Watch out for possible misunderstanding about names of these interfaces, sometimes they are simple like the old legacy names:

  • eth0, eth1 – Ethernet
  • wlan0, wlan1 – Wireless
  • lo – Loopback (unchanged)

Today they look like this:

  • PCI path
    • enp3s0 → Ethernet, PCI bus 3, slot 0
    • wlp2s0 → Wireless, PCI bus 2, slot 0
  • On-board index
    • eno1 → On-board NIC #1
  • MAC-based (fallback)
    • enx78e7d1ea46da → Based on MAC address

I hope you find this article and its content helpful. 


Comments are welcomed below from registered users.  You can also leave comments at our Discord server

If you would like to see more content and articles like this, please support us by clicking the patron link where you will receive free bonus access to courses and more, or simply buying us a cup of coffee!

Leave a Comment

Scroll to Top