LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 05-06-2016, 03:59 PM   #1
vinyard
LQ Newbie
 
Registered: Apr 2016
Posts: 8

Rep: Reputation: Disabled
Why does wireshark not recommend using it as root


Hi

The logic behind wireshark doesn't make sense. In order to capture packets from the interface, you have to be root but warns us not to. Why???

Tcpdump doesn't warn us when we run it as root. Is there a away for a regular user to capture packets from the interface or should we just ignore the warning from wireshark and use it as root?
 
Old 05-06-2016, 04:51 PM   #2
astrogeek
Moderator
 
Registered: Oct 2008
Distribution: Slackware [64]-X.{0|1|2|37|-current} ::12<=X<=14, FreeBSD_12{.0|.1}
Posts: 5,352
Blog Entries: 11

Rep: Reputation: 3316Reputation: 3316Reputation: 3316Reputation: 3316Reputation: 3316Reputation: 3316Reputation: 3316Reputation: 3316Reputation: 3316Reputation: 3316Reputation: 3316
Here is a good summary.

Wireshark does much more than tcpdump and has a much greater attack surface.

It is never, ever advisable to just ignore warnings and run anything as root! The warnings are there for good reason!

Last edited by astrogeek; 05-06-2016 at 04:57 PM.
 
Old 05-06-2016, 07:00 PM   #3
jefro
Moderator
 
Registered: Mar 2008
Posts: 19,514

Rep: Reputation: 3017Reputation: 3017Reputation: 3017Reputation: 3017Reputation: 3017Reputation: 3017Reputation: 3017Reputation: 3017Reputation: 3017Reputation: 3017Reputation: 3017
At one time I think it was an issue with how it attached to some nic's. The way some drivers worked, you needed to access root.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
I'm new to wireshark initramfs Linux - Software 2 09-02-2014 02:15 PM
Wireshark - Launch as root from the dashboard? KYJazzyJeff Ubuntu 2 10-23-2012 07:37 AM
about wireshark shailesh_tatware Linux - Newbie 2 08-12-2010 03:29 AM
wireshark on ubuntu doesn't want to save .pcaps (even as root) gregnorc Linux - Security 5 02-11-2010 12:17 AM
wireshark ... maas187 Linux - Software 1 08-27-2008 10:18 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 07:46 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration