Sunday, December 9, 2012

Wireshark: Enabling capturing from a non-root user

Under Ubuntu 12.04
Unlike youtube video, logout was necessary to get interfaces to show up on the wireshark!

$ sudo apt-get update
$ sudo apt-get install wireshark

$ sudo groupadd wireshark
$ sudo usermod -a -G wireshark USER_NAME
$ sudo chgrp wireshark /usr/bin/dumpcap
$ sudo chmod 750 /usr/bin/dumpcap
$ sudo setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap

No comments:

Post a Comment