Wireshark packet capture settings for common users in ubuntu

Wireshark in ubuntu requires the root permission for normal users to capture packets and set dumpcap. if Wireshark is opened as a normal user, Wireshark certainly does not have the permission to use dumpcap to intercept packets. Although www.2cto.com can use sudowireshark... wireshark in ubuntu requires the root permission for normal users to capture packets and set dumpcap. if Wireshark is opened as a normal user, Wireshark certainly does not have the permission to use dumpcap to intercept packets. Although sudo wireshark can be used for www.2cto.com, it is obviously not safe or convenient to use root to open Wireshark in sudo mode, because the resulting data package also belongs to the root user. Solution to this problem-Wireshark can be used by using the user group function. specific operations: 1. add wireshark user group www.2cto.com sudo groupadd wireshark 2. change dumpcap to wireshark user group sudo chgrp wireshark/usr/bin/dumpcap 3. Grant the wireshark user group root permission to use dumpcap sudo chmod 4755/ usr/bin/dumpcap (note: if it is set to 4754 Wireshark, the system still prompts that you do not have the permission. 4. add the common user name to the wireshark user group. my user name is "dengyi" (you need to modify it according to the specific user name !), Run the sudo gpasswd-a dengyi wireshark command to complete the process. when you log on to Wireshark as a common user, dengyi will have the permission to capture packets.