Hello Lars,
On Tue, Mar 20, 2012 at 05:04:06PM +0100, RUOFF, LARS (LARS)** CTR ** wrote:
> On an Ubunutu 10.04, I tried to
> sudo dumpcap -w d1.pcap
>
> which gave me:
> The file to which the capture would be saved ("d1.pcap") could not be opened: Permission denied.
>
> according to my naive Linux knowledge, i would have expected "sudo" to give me all the necessary permissions.
> What am i missing here?
Maybe Ubuntu drops permissions once it has openend the capture devices.
So the capture devices have been opened before dropping privileges but the output
files were opened after dropping privileges. At least Debian does it like this
when I call wireshark/tshark.
Ciao
Jörg
--
Joerg Mayer <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.