Home » Questions » Computers [ Ask a new question ]

Wireshark - permission problem in Ubuntu

Wireshark - permission problem in Ubuntu

I installed wireshark (tshark) using

Asked by: Guest | Views: 69
Total answers/comments: 1
Guest [Entry]

"I had a similar issue with not being able to see any network interfaces when running Wireshark (tshark's GUI cousin) as a non-root user. Nowadays, Ubuntu and Debian support file capabilities with which I was able to get Wireshark (and tshark) running as non-root.

Create a wireshark group.

sudo groupadd wireshark

Add your username to the wireshark group.

sudo usermod -a -G wireshark yourusername

Change group ownership of dumpcap to wireshark group.

sudo chgrp wireshark /usr/bin/dumpcap

Set file permissions of dumpcap to 754 (rwx for user, r-x for group).

sudo chmod 754 /usr/bin/dumpcap

Enable file capabilities for dumpcap.

sudo setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap

You may also need to run dpkg-reconfigure for wireshark-common if you install Wireshark or tshark as a package through Synaptic and enable packet capture for non-root users.

sudo dpkg-reconfigure wireshark-common"