Wireshark on Gentoo
>> I'm confused on how to run wireshark on Gentoo. The ebuild says:
>>
>> * With version 0.99.7, all function calls that require elevated privileges
>> * have been moved out of the GUI to dumpcap. WIRESHARK CONTAINS OVER ONE
>> * POINT FIVE MILLION LINES OF SOURCE CODE. DO NOT RUN THEM AS ROOT.
>> *
>> * NOTE: To run wireshark as normal user you have to add yourself into
>> * wireshark group. This security measure ensures that only trusted
>> * users allowed to sniff your traffic.
>>
>> I added my user to the wireshark group, but there are no interfaces
>> listed in the program. I read:
>>
>> http://wiki.wireshark.org/CaptureSetup/CapturePrivileges
>>
>> "Running Wireshark (or any other network capture/analyzer, for that
>> matter) on Linux needs root privileges. Therefore, you have to have
>> root privileges when starting Wireshark, else you can't capture data."
>>
>> I'm not sure how to proceed.
>>
>> - Grant
>>
>>
>>
>
>
> Works as a user here. Here is some info to compare against.
>
> root@smoker / # emerge -pv wireshark
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies... done!
> [ebuild R ] net-analyzer/wireshark-1.0.5 USE="caps gtk ipv6 pcap
> pcre zlib -adns -gcrypt -gnutls -kerberos -lua -portaudio -profile
> (-selinux) -smi -threads" 0 kB
>
> Total: 1 package (1 reinstall), Size of downloads: 0 kB
> root@smoker / # cat /etc/group | grep wireshark
> wireshark:x:444:dale
> root@smoker / #
>
> Hope that helps.
>
> Dale
Thanks Dale, my stuff is very similar to your's. I don't know why it
isn't finding eth0 and wlan0 (USB wireless). I'll ask on the hardened
list in case it's a hardened issue.
- Grant
|