Wireshark ohne root starten

sudo chgrp wireshark /usr/bin/dumpcap
sudo chmod 754 /usr/bin/dumpcap
sudo setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap

Reihenfolge ist zubedingt zu beachten!

oder

Q)
Keine Interfaces sichtbar

A)

sudo dpkg-reconfigure wireshark-common 
sudo usermod -a -G wireshark $USER
http://ask.wireshark.org/questions/7523/ubuntu-machine-no-interfaces-listed

Quelle:
Platform-Specific information about capture privileges
Sniffing with Wireshark as a Non-Root User

Leave a Reply

Your email address will not be published. Required fields are marked *