Query about monitoring unknown Internet traffic

[Karl Auer]

On Sun, 2015-10-18 at 09:43 +0200, Petter Adsen wrote:
> I just tried to install wireshark on this machine. During the install
> it showed me a dialog that asked me if members of the group 'wireshark'
> should be able to capture packets. Say 'yes' to that dialog, add your
> user to the 'wireshark' group, and log out and back in again so that
> the new group is picked up. That should fix your problem.

That's interesting. I installed the repo wireshark for Ubunti 14.04-2
LTS the day I installed the OS, because I use wireshark a fair bit. I
don't recall that question, I have no wireshark group on my system, and
obviously my username is not in that group.

So I just set up the group, added myself to it, logged out and back in
and I'm now in the wireshark group. But starting wireshark as plain old
me still results in no snoopable interfaces. I still have to run
wireshark as root if I want to capture packets live on an interface.

Anyway, this looks like the absolute horses mouth:

   https://wiki.wireshark.org/CaptureSetup/CapturePrivileges

I haven't tried their techniques yet though.

Regards, K.


-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer
http://twitter.com/kauer389

GPG fingerprint: 3C41 82BE A9E7 99A1 B931 5AE7 7638 0147 2C3C 2AC4
Old fingerprint: EC67 61E2 C2F6 EB55 884B E129 072B 0AF0 72AA 9882