Shulou(Shulou.com)06/01 Report--

Today in linux environment running wireshark capture package, after installing wireshark, start capture package always error, the content is as follows:

The capture session could not be initiated (failed to set hardware filter to promiscuous mode)

Please check to make sure you have sufficient permissions, and that you have

Query the solution, the result is to turn off the hybrid mode in the option, still report error after closing, continue to query, suddenly think of it may be user permission problems, and then use sudo wireshark to open wireshark is normal, but wireshark official does not recommend doing so:

Running as user "root" and group "root".

This could be dangerous.

dumpcap requires root privileges to use, Wireshark is opened as an ordinary user, Wireshark certainly does not have permission to use dumpcap to intercept packets.

So use another method, change the group of/usr/share/dumpcap, add a group: wireshark, chgrp to wireshark group, and then change to 4755 permissions, so as to facilitate permission control. The specific steps are as follows:

1. Add user groups. I'll take Wireshark as an example.

sudo groupadd wireshark

2. Change dumpcap to wireshark user group

sudo chgrp wireshark /usr/bin/dumpcap

3. Let the wireshark user group have root privileges and use dumpcap

sudo chmod 4755 /usr/bin/dumpcap

4. Add yourself to the wireshark user group. My user is godben. You need to change this.

sudo gpasswd -a godben wireshark

That's it, you can open Wireshark with your own user and have access to it.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.