Ask Your Question

hr0m's profile - activity

2020-04-25 21:54:45 +0000 marked best answer Self compiled tshark has no permission to capture on device

On a Debian system, i have installed wireshark/tshark from the repository. So I had a working version.

However due to truncation, i needed to compile tshark with ITEM_LABEL_LENGTH set to much higher value, since i am interested in the data on a websocket.

I successfully compiled tshark and dumpcap. I can run it with sudo, however I am not able to run tshark with my usual user anymore. It is possible with the tshark version from Debian's repositories.

I have tried to set WIRESHARK_RUN_FROM_BUILD_DIRECTORY as proposed here

(Possible duplicate of this, however I didn't come to a solution)

2020-04-25 21:54:44 +0000 received badge  Scholar (source)
2020-04-25 21:54:41 +0000 commented answer Self compiled tshark has no permission to capture on device

setcap cap_net_raw,cap_net_admin=eip dumpcap has done the trick

2020-04-25 19:55:15 +0000 asked a question Self compiled tshark has no permission to capture on device

Self compiled tshark has no permission to capture on device On a Debian system, i have installed wireshark/tshark from t