Ubuntu using Wireshark hint No interface can be used

The Wireshark is a powerful network packet analysis tool with a graphical interface.

Dumpcap requires root permission to be used, open with a normal user Wireshark,wireshark of course no permission to use DUMPCAP to intercept the packet.

Can actually use

sudo wireshark

Sudo is the way to open wireshark with root, but this is obviously not safe, and is not very convenient, because the resulting packet data is also the root user, and sudo open wireshark will also remind you to use the root permission to use Wireshark carefully, and give you a document description.

The documentation shows that you can use Wireshark with the user Group feature, followed by a specific method:

1, add user group, I take Wireshark as an example

sudo groupadd Wireshark

2. Change Dumpcap to Wireshark user group

sudo chgrp wireshark/usr/bin/dumpcap

3, let Wireshark user group have root permission to use Dumpcap

sudo chmod 4755/usr/bin/dumpcap

(ps:4754 Wireshark will still prompt for no permissions)

4, will oneself join Wireshark user group, my user is TECN, you add need to change this.

sudo gpasswd-a TECN Wireshark

This completes, you can use your own user to open Wireshark, and have permission to operate.

Original address: http://www.94cat.com/blog/?p=1107