I've installed wireshark in a privileged Ubuntu container and I don't want wireshark to have access to interfaces of host OS so that user won't be able to capture the packets of host OS. How do I configure wireshark for the same.
Don't run docker in privileged mode. It grants way too much access. Lookup to properly setup Wireshark capture capabilities in Debian and Ubuntu, which is documented in many places. This assuming you're setting up users in your docker container. Otherwise this is more of a docker configuration question than a Wireshark question.
Asked: 2021-01-19 06:47:50 +0000
Seen: 3,219 times
Last updated: Jan 21 '21
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
Not sure how your interfacing is setup. I would expect an ethernet pair connecting your container to the docker0 bridge. That would not allow you to see the host OS interfaces.
My container setup is as below:
I have not done any setup for interfaces
I doubt you see all interfaces, unless you deploy with --net=host
What do you want to capture or where to capture from? You exclude host interfaces, but then you can only capture traffic that reaches your container or originates in it? What do you want to do?