Monday, December 13, 2010

Running Wireshark as a non-root user

Ubuntu laptop lost the "wireshark as root" menu item.

Rather than create one I did this:

sudo chgrp admin /usr/bin/dumpcap
sudo chmod 750 /usr/bin/dumpcap
sudo setcap cap_net_raw,cap_net_admin+eip /usr/bin/dumpcap

Works now as me.
[the debian package is using (almost) pam_cap ]