Hello all, I've used Wireshark many times in the past in both Windows and Linux. I can spell TCP/IP but I am no expert. On my blazing 750 MHz Linux (2.6.32) Ubuntu (Lucid Lynx 10.04 LTS) machine, Wireshark does not list my NIC card. I expected to see eth0 listed, but it's not. I am on the machine now making this post, so it is active and working. BTW, eth0 is the only NIC card in the machine. Wireshark lists no interfaces. Did I miss a .conf file somewhere? -Shawn asked 24 Aug '11, 19:37  Shawnerz edited 26 Aug '11, 14:34  helloworld |
2 Answers:
It sounds like you may not have set permissions so that you can capture as a non-root user. Check the CaptureSetup/CapturePrivileges page and answered 25 Aug '11, 06:46  multipleinte... |
run this command: answered 23 Jun '17, 05:24  scofieldzg edited 23 Jun '17, 05:25 are you sure it belongs here? (23 Jun '17, 06:36) sindy For sure, it is written in the captureprivilihes, but also wireshark should run under su (23 Jun '17, 06:40) scofieldzg Somehow a combination of
made me think that you may have been answering a different question actually. (23 Jun '17, 06:46) sindy Isnt that what is mentioned here? https://anonscm.debian.org/viewvc/collab-maint/ext-maint/wireshark/trunk/debian/README.Debian?view=markup (23 Jun '17, 06:50) scofieldzg Exactly. That's why I was so confused about your reference to (23 Jun '17, 07:11) sindy
Yes, but it's not mentioned in the context of getting Wireshark to list your interfaces. The manual for a car might talk about both changing the oil and changing the tires, but changing the oil if you have a flat tire probably won't help. (23 Jun '17, 10:53) Guy Harris ♦♦ showing 5 of 6 show 1 more comments |
Multiple, OK, I wen to Users and Groups in Ubuntu, created a group called 'wireshark' and added myself to the group. Rebooted (Windows habit, sorry) but Wireshark still didn't see the interface.
Then, I went to /user/bin/wireshark and did a sudo ./wireshark, put in my password, and Wireshark saw eth0 and worked great. But on start, WS gave me warning that WS shouldn't be run as root.
Running as root worked but I get the feeling that I'm doing something wrong. Shouldn't I be able to run WS from Ubuntu's Applications | Internet menu? Thanks, -Shawn
Why did you add the "wireshark" group? Did
/usr/share/doc/wireshark-common/README.Debiansays something about that, or was that from CaptureSetup/CapturePrivileges? If it was from CaptureSetup/CapturePrivileges, note that the "Limiting capture permission to only one group" instructions tell you to do a lot more than just add a "wireshark" group and add yourself to it - read it again and do all of the steps, including the "setcap" step.