Whenever i try to analyze packets using tshark on Ubuntu with root permission i got the following error, however when i switch to user profile (su berkey), there is no problem. Why this occurs? is there a solution?
asked 23 Dec '12, 03:53 berkey edited 23 Dec '12, 03:53 |
4 Answers:
If you're not using any lua scripting with Tshark, then all is fine. Tshark just protects you from running a script (with endless possibilities to mess up your system if programmed badly) with root privileges. You can ignore the warning in that case. If you do run lua scripts, it is strongly advised to change your system to be able to do capturing and analysis without root privileges. If you do need to run Tshark with root privileges and lua scripts, then you need to patch the Tshark source code to remove the root-check... answered 23 Dec '12, 04:17 SYN-bit ♦♦ |
Don't do that. Instead, give dumpcap the privileges it needs to capture traffic without requiring root privileges. answered 24 Dec '12, 02:37 Guy Harris ♦♦ |
fix lua error: cd /usr/share/wireshark nano init.lua line #29 change to: disable_lua = true answered 28 Oct '13, 05:15 oops13 edited 28 Oct '13, 05:16 |
I just commented out the dialog line. From: dofile = function() error("dofile has been disabled") end To: -- dofile = function() error("dofile has been disabled") end answered 07 Dec '14, 11:48 Kennybobs |
thanks i don't use any Lua commands. Your answer solved my question.