Hi Christian, 2017-02-21 10:27 GMT+01:00 Christian Pietsch <[email protected]>: > On Mon, Feb 20, 2017 at 11:01:48PM +0100, Bálint Réczey wrote: >> > Trying to start capturing from the network interface resulted in the >> > error message “you don't have permission to capture”. >> > >> > This is what I had to do to get capture to work: >> > >> > sudo chgrp wireshark /usr/bin/dumpcap >> > sudo setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap >> > >> > The last line was adapted from >> > https://bbs.archlinux.org/viewtopic.php?id=189623 . >> >> Have you followed this guide?: >> /usr/share/doc/wireshark-common/README.Debian > > Yes, I chose method I./b. > > After installing wireshark-common, `/usr/bin/dumpcap` was not in > the group wireshark but in some numerical, non-existing group. > It also lacked capabilities. Should not the installer set these?
It should when you run the following command, but not by default [1]: $ sudo dpkg-reconfigure wireshark-common Could you please copy the output of it if it fails? Also please copy the output of the following command after the dpkg-reconfigure command set the permissions: $ ls -alh /usr/bin/dumpcap Cheers, Balint [1] https://anonscm.debian.org/viewvc/collab-maint/ext-maint/wireshark/trunk/debian/README.Debian?revision=27070&view=markup
