If wireshark isn't in the Ubuntu archive, it should be. Ethereal is now old, and currently has major security issues. See http://www.wireshark.org/ -- please remove ethereal from the archive (replaced by wireshark) https://launchpad.net/bugs/54715