Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Adding Wireshark to pfSense

    Scheduled Pinned Locked Moved General pfSense Questions
    7 Posts 5 Posters 7.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • NollipfSenseN
      NollipfSense
      last edited by

      How do I add Wireshark to pfSense? Or, how to request the package's availability in the repository for install?

      pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
      pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

      1 Reply Last reply Reply Quote 1
      • J
        jamesonp
        last edited by

        Any reason why you can't use the native packet capture, download the capture and then open it in Wireshark?

        Also, I don't see why you couldn't try installing Wireshark via the command line with:

        64 bit: pkg add http://pkg.freebsd.org/FreeBSD:10:amd64/release_3/All/wireshark-2.0.2.txz
        32 bit: pkg add http://pkg.freebsd.org/FreeBSD:10:i386/release_3/All/wireshark-2.0.2.txz

        Please keep in mind, I don't know if this will cause any issues with pfSense.  Proceed at your own risk.

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Yes, what exactly are you trying to do ?

          You actually want to do the analysis on the firewall rather than exporting the capture file?

          This seems like a generally bad idea….

          Steve

          1 Reply Last reply Reply Quote 0
          • N
            NOYB
            last edited by

            Re: Install Wireshark on 2.3.1
            https://forum.pfsense.org/index.php?topic=112719.msg627778#msg627778

            Remote Packet Capture
            https://forum.pfsense.org/index.php?topic=89917

            Re: Wireshark on WAN
            https://forum.pfsense.org/index.php?topic=123836.msg683895#msg683895

            1 Reply Last reply Reply Quote 0
            • ?
              A Former User
              last edited by

              Thanks NOYB, your links also had this gem that I like. ;)
              Using tcpdump to capture traffic remotely but save output to a local file.
              https://forum.pfsense.org/index.php?topic=107605.0

              1 Reply Last reply Reply Quote 0
              • NollipfSenseN
                NollipfSense
                last edited by

                @stephenw10:

                Yes, what exactly are you trying to do ?

                You actually want to do the analysis on the firewall rather than exporting the capture file?

                This seems like a generally bad idea….

                Steve

                I was thinking real time instead of capture then analyze…I know this will require massive memory; however it's just for learning and I plan on executing this on a Dell PowerEdge R710 for my home/home office.

                pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                1 Reply Last reply Reply Quote 0
                • NollipfSenseN
                  NollipfSense
                  last edited by

                  @NOYB:

                  Re: Install Wireshark on 2.3.1
                  https://forum.pfsense.org/index.php?topic=112719.msg627778#msg627778

                  Remote Packet Capture
                  https://forum.pfsense.org/index.php?topic=89917

                  Re: Wireshark on WAN
                  https://forum.pfsense.org/index.php?topic=123836.msg683895#msg683895

                  Thank you NOYB

                  pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                  pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.