{"id":18,"date":"2014-08-14T11:18:14","date_gmt":"2014-08-14T09:18:14","guid":{"rendered":"http:\/\/wp.famlarsson.net\/?p=18"},"modified":"2014-08-14T11:18:14","modified_gmt":"2014-08-14T09:18:14","slug":"wireshark-networc-capturing","status":"publish","type":"post","link":"https:\/\/wp.famlarsson.net\/?p=18","title":{"rendered":"Wireshark networc capturing"},"content":{"rendered":"<p>When I tried to catch ethernet traffic the program WireShark did not find any devicec. I looked in the file \/usr\/share\/doc\/wireshark\/README.Debian, but could not solve the problem. Then I found this solution on<a href=\"http:\/\/superuser.com\/questions\/81233\/wireshark-permission-problem-in-ubuntu\"> http:\/\/superuser.com\/questions\/81233\/wireshark-permission-problem-in-ubuntu<\/a><\/p>\n<div class=\"post-text\">\n<p>I had a similar issue with not being able to see any network interfaces when running Wireshark (tshark&#8217;s GUI cousin) as a non-root user. Nowadays, Ubuntu and Debian support file capabilities with which I was able to get Wireshark (and tshark) running as non-root.<\/p>\n<p>First, create a wireshark group:<\/p>\n<pre><code>:~$ sudo groupadd wireshark\r\n<\/code><\/pre>\n<p>Second, add your username to the wireshark group<\/p>\n<pre><code>:~$ sudo usermod -a -G wireshark yourusername\r\n<\/code><\/pre>\n<p>Third, change group ownership of dumpcap to wireshark group<\/p>\n<pre><code>:~$ sudo chgrp wireshark \/usr\/bin\/dumpcap\r\n<\/code><\/pre>\n<p>Fourth, set file permissions of dumpcap to 754 (rwx for user, r-x for group)<\/p>\n<pre><code>:~$ sudo chmod 754 \/usr\/bin\/dumpcap\r\n<\/code><\/pre>\n<p>Fifth, enable file capabilities for dumpcap<\/p>\n<pre><code>:~$ sudo setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' \/usr\/bin\/dumpcap\r\n<\/code><\/pre>\n<p>You may also need to run dpkg-reconfigure for wireshark-common if you install wireshark or tshark as a package through Synaptic and enable packet capture for non-root users<\/p>\n<pre><code>:~$ sudo dpkg-reconfigure wireshark-common\r\n<\/code><\/pre>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>When I tried to catch ethernet traffic the program WireShark did not find any devicec. I looked in the file \/usr\/share\/doc\/wireshark\/README.Debian, but could not solve the problem. Then I found this solution on http:\/\/superuser.com\/questions\/81233\/wireshark-permission-problem-in-ubuntu I had a similar issue with not being able to see any network interfaces when running Wireshark (tshark&#8217;s GUI cousin) as [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[7,6],"_links":{"self":[{"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=\/wp\/v2\/posts\/18"}],"collection":[{"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18"}],"version-history":[{"count":1,"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=\/wp\/v2\/posts\/18\/revisions"}],"predecessor-version":[{"id":19,"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=\/wp\/v2\/posts\/18\/revisions\/19"}],"wp:attachment":[{"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.famlarsson.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}