Ask Your Question

Revision history [back]

Sniff usb with non-root user under Ubuntu 18.04

I followed this guide in Linux to make wireshark work with usual user rights, but unfortunately it still requires to run as root to be possible to sniff USB traffic. The user is in wireshark group.

[email protected]:~$ groups q
q : q adm tty disk lp uucp dialout cdrom sudo audio dip video plugdev users lpadmin pulse pulse-access sambashare vboxusers input wireshark docker libvirt

Also ACL read permission is also set.

[email protected]:~$ sudo setfacl -m u:$USER:r /dev/usbmon*
[email protected]:~/work/scripts$ getfacl /dev/usbmon0
getfacl: Removing leading '/' from absolute path names
# file: dev/usbmon0
# owner: root
# group: root
user::rw-
user:q:r--
group::---
mask::r--
other::---

How to make it possible?