How to enable Wireshark without running as root in Trusty 14.04
I found that after running:
sudo dpkg-reconfigure wireshark-common
a wireshark
group been created in /etc/gshadow
. So I just wrote:
sudo gpasswd -a $USER wireshark
and logout/login and now it works fine!
Yes, you did correct. But some thing is missing.If you see the error message like couldn't run /usr/bin/dumpcap in child process: Permission Denied
.Go to terminal and
sudo dpkg-reconfigure wireshark-common
choose answer as "YES
" .Then add user to the group by
sudo adduser $USER wireshark
Then restart your machine and open wireshark. It works.
sudo setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap
Check this question