Friday, 7 March 2014

Granting Wireshark privileged capabilities

If you want to run wireshark as normal user (not root), the following capabilities should be set, so that wireshark can access the required socket capabilities:


sudo addgroup -system wireshark
sudo chown root:wireshark /usr/bin/dumpcap 

sudo setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap 
sudo usermod -a -G wireshark YOUR_USER_NAME

No comments:

Post a Comment