Page 2 of 2 FirstFirst 12
Results 11 to 13 of 13

Thread: Need Help Configuring Wireshark

  1. #11
    Join Date
    Aug 2012
    Beans
    12

    Re: Need Help Configuring Wireshark

    I've recently installed Ubuntu 12.04 and Wireshark. Due to issues with a video driver I had to install Ubuntu again. Both times I used the following procedure to fix the permissions issues with Wireshark:

    http://tryout-chen.blogspot.com/2011...capturing.html

    After following the procedure and logging out/in Wireshark runs without error and I can capture on my Ethernet and WiFi interfaces.

    Good luck!

    Colo993

  2. #12
    Join Date
    Aug 2011
    Location
    Everywhere and Nowhere
    Beans
    136
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Need Help Configuring Wireshark

    Hey colo, I actually got it working after trying out the instructions that CyberpathicGhost posted.

    BTW- thanks to CyberpathicGhost for that! I basically ran the commands like it was the first time and that did it. No error messages and I didn't even have to do a fresh install
    Cannabis doesn't take away your motivation to do things, it takes away your motivation to do things that suck. -Joe Rogan

  3. #13
    Join Date
    Mar 2011
    Beans
    1
    Distro
    Ubuntu 10.10 Maverick Meerkat

    Re: Need Help Configuring Wireshark

    I faced the same problems (on Xubuntu 11.10) as the OP. The original blog those instructions are from (https://blog.wireshark.org/2010/02/r...eshark-as-you/) has two unfortunate errors in the section of how to set up dumpcap using Linux capabilities, rather than making dumpcap as setuid.

    Error 1: forgot to chgrp of /usr/bin/dumpcap to the wireshark group
    Error 2: didn't add 'eip' to both capability settings.

    Here's how the instructions should read:
    $ sudo su - root
    # sudo apt-get install libcap2-bin
    # groupadd wireshark
    # usermod -a -G wireshark gerald
    # chmod 750 /usr/bin/dumpcap
    # chgrp wireshark /usr/bin/dumpcap
    # setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap

    Note: on modern Ubuntu's you probably don't need to install libcap2-bin. I already had it.
    Last edited by midpeter444; September 25th, 2012 at 04:15 AM.

Page 2 of 2 FirstFirst 12

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •