Whenever i try to analyze packets using tshark on Ubuntu with root permission i got the following error, however when i switch to user profile (su berkey), there is no problem. Why this occurs? is there a solution?
asked 23 Dec '12, 03:53
edited 23 Dec '12, 03:53
If you're not using any lua scripting with Tshark, then all is fine. Tshark just protects you from running a script (with endless possibilities to mess up your system if programmed badly) with root privileges. You can ignore the warning in that case.
If you do run lua scripts, it is strongly advised to change your system to be able to do capturing and analysis without root privileges.
If you do need to run Tshark with root privileges and lua scripts, then you need to patch the Tshark source code to remove the root-check...
answered 23 Dec '12, 04:17
Don't do that. Instead, give dumpcap the privileges it needs to capture traffic without requiring root privileges.
answered 24 Dec '12, 02:37
Guy Harris ♦♦
fix lua error:
line #29 change to:
disable_lua = true
answered 28 Oct '13, 05:15
edited 28 Oct '13, 05:16
I just commented out the dialog line.
dofile = function() error("dofile has been disabled") end
-- dofile = function() error("dofile has been disabled") end
answered 07 Dec '14, 11:48