The Wireshark is a powerful network packet analysis tool with a graphical interface.
Dumpcap requires root permission to be used, open with a normal user Wireshark,wireshark of course no permission to use DUMPCAP to intercept the packet.
Can actually use
sudo wireshark
Sudo is the way to open wireshark with root, but this is obviously not safe, and is not very convenient, because the resulting packet data is also the root user, and sudo open wireshark will also remind you to use the root permission to use Wireshark carefully, and give you a document description.
The documentation shows that you can use Wireshark with the user Group feature, followed by a specific method:
1, add user group, I take Wireshark as an example
sudo groupadd Wireshark
2. Change Dumpcap to Wireshark user group
sudo chgrp wireshark/usr/bin/dumpcap
3, let Wireshark user group have root permission to use Dumpcap
sudo chmod 4755/usr/bin/dumpcap
(ps:4754 Wireshark will still prompt for no permissions)
4, will oneself join Wireshark user group, my user is Benmao, you add need to change this.
sudo gpasswd-a Benmao Wireshark
This completes, you can use your own user to open Wireshark, and have permission to operate.
Original link: http://amapig.com/ubuntu-use-wireshark-can-not-find-interface/
Go Ubuntu uses Wireshark to find interface solution