If you want to run wireshark as normal user (not root), the following capabilities should be set, so that wireshark can access the required socket capabilities:
sudo addgroup -system wireshark
sudo chown root:wireshark /usr/bin/dumpcap
sudo setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap
sudo usermod -a -G wireshark YOUR_USER_NAME
No comments:
Post a Comment