Adding Wireshark to pfSense

[NollipfSense]

How do I add Wireshark to pfSense? Or, how to request the package's availability in the repository for install?

[jamesonp]

Any reason why you can't use the native packet capture, download the capture and then open it in Wireshark?

Also, I don't see why you couldn't try installing Wireshark via the command line with:

64 bit: pkg add http://pkg.freebsd.org/FreeBSD:10:amd64/release_3/All/wireshark-2.0.2.txz
32 bit: pkg add http://pkg.freebsd.org/FreeBSD:10:i386/release_3/All/wireshark-2.0.2.txz

Please keep in mind, I don't know if this will cause any issues with pfSense.  Proceed at your own risk.

[stephenw10]

Yes, what exactly are you trying to do ?

You actually want to do the analysis on the firewall rather than exporting the capture file?

This seems like a generally bad idea….

Steve

[NOYB]

Re: Install Wireshark on 2.3.1
https://forum.pfsense.org/index.php?topic=112719.msg627778#msg627778

Remote Packet Capture
https://forum.pfsense.org/index.php?topic=89917

Re: Wireshark on WAN
https://forum.pfsense.org/index.php?topic=123836.msg683895#msg683895

[A Former User]

Thanks NOYB, your links also had this gem that I like. ;)
Using tcpdump to capture traffic remotely but save output to a local file.
https://forum.pfsense.org/index.php?topic=107605.0

[NollipfSense]

@stephenw10:

Yes, what exactly are you trying to do ?

You actually want to do the analysis on the firewall rather than exporting the capture file?

This seems like a generally bad idea….

Steve

I was thinking real time instead of capture then analyze…I know this will require massive memory; however it's just for learning and I plan on executing this on a Dell PowerEdge R710 for my home/home office.

[NollipfSense]

@NOYB:

Re: Install Wireshark on 2.3.1
https://forum.pfsense.org/index.php?topic=112719.msg627778#msg627778

Remote Packet Capture
https://forum.pfsense.org/index.php?topic=89917

Re: Wireshark on WAN
https://forum.pfsense.org/index.php?topic=123836.msg683895#msg683895

Thank you NOYB