If you skipped the "non-superuser" prompt during installation, you can bring it back by running: sudo dpkg-reconfigure wireshark-common

: A powerful command-line version of Wireshark for headless servers or automation.

: Contains the essential files and the dumpcap utility used by both GUI and CLI versions.

To install Wireshark on Debian 11, 12, or the testing branch (Trixie), open your terminal and run the following commands:

After the download and installation are complete, you must add your user account to the wireshark group to enable packet capturing: : sudo usermod -a -G wireshark $USER

During the installation, a configuration screen will appear asking: It is highly recommended to select "Yes" . This allows you to capture network traffic without running the entire Wireshark application as root, which is a security best practice. Post-Installation Configuration

: Includes the official user guide and documentation. Manual Download vs. Repository How To Install Wireshark on Debian

Wireshark is the industry-standard network protocol analyzer used for troubleshooting, analysis, and educational purposes. For Debian users, the most efficient way to "download" Wireshark is through the official repositories using the Advanced Package Tool (APT), rather than manual downloads from the Wireshark website .