If you’ve switched to Linux for privacy, Ubuntu might be your first stop. It’s user-friendly, popular, and widely recommended. But a question that keeps coming up is: “Does Ubuntu track you?” Or more specifically: how much telemetry does Ubuntu 24.04 actually send?
We decided to find out with real data captured using Wireshark over a 24-hour period from a clean Ubuntu install. So this article breaks down exactly what Ubuntu does in the background, what it means for your privacy, and how you can see it for yourself.
The Testing Process: How We Measured Ubuntu’s Telemetry
Before going into the data, here’s how we set up the experiment to capture accurate, unbiased results:
🔧 1. Fresh Install of Ubuntu 24.04 LTS
We began with a clean installation, no added software, no third-party repositories, and crucially, no external accounts connected (no Snap Store logins, no browser usage).
🛡️ 2. System Updated Before Monitoring
Before installing Wireshark, we ran:
sudo apt update && sudo apt upgrade
Why is this important?
- Updated packages avoid known vulnerabilities that could secretly “phone home” before you start observing traffic.
- It prevents background updates later that might muddy the results.
- It ensures tools like Wireshark and libpcap work reliably for packet capturing.
🧪 3. Wireshark Installed & Monitoring Began
Wireshark was installed via:
sudo apt install wireshark
Then, we selected the wlo interface (your system may show wlan0, enp3s0, etc.) to capture just internet traffic — avoiding virtual and internal noise from the loopback interface.
We hit record and let Ubuntu run for 24 hours with no user interaction.
Capturing Ubuntu’s Network Behavior
For a full day, the system sat idle, no apps launched, no terminal commands, no browser activity. This was to ensure that only the operating system’s built-in processes were recorded.
Why 24 hours? Some telemetry systems delay their reporting or run based on time triggers. Short tests can miss this. We made sure nothing slipped through the cracks.
Wireshark recorded everything: DNS requests, HTTP packets, NTP (time sync) calls, even obscure chatter like ARP and mDNS.
The Results: What Ubuntu 24.04 Actually Sends Out
After analyzing the packet capture, here’s a detailed breakdown of the outbound traffic initiated directly by Ubuntu:
✅ 1. Connectivity Check (Expected & Harmless)
Ubuntu pinged:
connectivity-check.ubuntu.com
This is a NetworkManager function used to verify internet access. The system sent a quick DNS request followed by a simple HTTP GET request.
🟢 No personal data
🟢 No tracking ID
🟢 No payload data
Just a basic “Am I online?” check.
🕒 2. NTP Time Sync Requests (Standard OS Behavior)
The system reached out to:
ntp.ubuntu.com (IP: 185.125.190.56)
This is Ubuntu syncing its clock to stay accurate — critical for:
- Secure logins
- Software updates
- TLS/SSL certificate validity
There was no identifiable data exchanged. It’s standard behavior across most operating systems.
🗂️ 3. ARP and mDNS Packets (Not Ubuntu’s Fault)
These were mostly local network noise, your router, other devices, and even your phone generate these.
Important: These weren’t initiated by Ubuntu; Wireshark captures all traffic visible to the network card.
📌 The Bottom Line
The only outbound traffic directly initiated by Ubuntu during this 24-hour idle period was:
- Connectivity checks (DNS + HTTP GET)
- NTP time syncs
That’s it. No ads, no tracking scripts, no outbound telemetry spam.
So, Is Ubuntu Really Private?
Here’s what all this means if you care about digital privacy:
🧠 Ubuntu Is Functional, Not Creepy
What we saw was anonymized, minimal communication designed to keep the system running properly. Nothing in the logs indicated session identifiers, usage patterns, or location tracking.
🔒 Time Syncing Supports Security
NTP isn’t a privacy threat — it’s a core requirement for modern operating systems. Without accurate time, many secure apps and protocols break down.
⚠️ But There Is Optional Telemetry (Heads-Up!)
Here’s where Ubuntu might catch you off guard:
- During installation, Ubuntu asks if you want to share system information.
- If you leave the box checked (which is default), it enables tools like:
ubuntu-reportpopularity-contest
These collect:
- Hardware specs
- Installed software lists
- Optional usage metrics
While anonymized and open-source, they still send data to Canonical — and many users don’t realize this is happening unless they manually opt out.
Final Verdict: Ubuntu Telemetry in 2025
Ubuntu 24.04 LTS does not silently track you. In our controlled 24-hour test, it sent:
- Minimal connectivity checks
- Standard time synchronization requests
- No identifiable telemetry without user opt-in
That said, ubuntu-report and similar tools can enable telemetry if you’re not careful during setup.
We’ve covered Linux Mint’s behavior in a similar test — check out the full breakdown.
