Saturday, March 20, 2010

Wireshark as non-root user

When in Windows, you get the NPF service... in Ubuntu/Debian, you get:

apt-get install libcap2-bin
setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap

[ backtrack ]