Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Self compiled tshark has no permission to capture on device

On a Debian system, i have installed wireshark/tshark from the repository. So I had a working version.

However due to truncation, i needed to compile tshark with ITEM_LABEL_LENGTH set to much higher value, since i am interested in the data on a websocket.

I successfully compiled tshark and dumpcap. I can run it with sudo, however I am not able to run tshark with my usual user anymore. It is possible with the tshark version from Debian's repositories.

I have tried to set WIRESHARK_RUN_FROM_BUILD_DIRECTORY as proposed here

(Possible duplicate of this, however I didn't come to a solution)