On Sun, Feb 14, 2010 at 4:11 AM, Marc Luethi <netztier@xxxxxxxxxx> wrote:
> On Sat, 2010-02-13 at 22:11 +0200, Mark Ryden wrote:
>> I though of installing wireshark on disk on key,
>
> That won't help. WinPcap needs to hook into the Operating System's
> network stack, and to do that, you need admin priviledges.
>
> You'll need a priviledged user to install WinPcap and if you want, it's
> service that will allow unprivileged users to capture traffic.
>
>> but again when installing winpcap it gives me a privilege error.
>
> q.e.d.
>
> You _can_ run Wireshark as unpriviledged user and without the WinPcap
> service, but you're limited to analysis of capture files that are
> obtained by other means (e.g. from running tcpdump on another system).
Sounds Great !!
> WinPcap is only needed if you want to capture packets on the system you
> are using.
>
Karthik Balaguru