PDA

View Full Version : [ubuntu] wireshark installtion in ubuntu 14.04



-@23%^yu*
August 18th, 2014, 09:04 PM
I have followed the following steps to install and run wireshark in my desktop

sudo apt-get install wireshark
sudo groupadd wireshark
sudo usermod -a -G wireshark YOUR_USER_NAME
sudo chgrp wireshark /usr/bin/dumpcap
sudo chmod 750 /usr/bin/dumpcap
sudo setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap
sudo getcap /usr/bin/dumpcap


found that this does not work. how to make wireshark detect my interfaces? And is there any possible vulnarability created by following the above steps. If so how to remove them?(I'm concerned by the command
sudo chmod 750 /usr/bin/dumpcap)

Harley_Bailey
January 28th, 2015, 02:43 PM
I ran the following commands
sudo apt-get install wireshark
sudo groupadd wireshark
sudo usermod -a -G wireshark YOUR_USER_NAME
sudo chgrp wireshark /usr/bin/dumpcap
sudo chmod 750 /usr/bin/dumpcap
sudo setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap
sudo getcap /usr/bin/dumpcap

when I started wireshark, it gave me a dumpcap error, so I ran
sudo chmod 777 /usr/bin/dumpcap and now wireshark works.
Please be advised setting the 777 file permission isn't strongly advised due to security reasons.
And yes I'm still pretty new to the linux CLI.

I hope someone finds this useful. :)