[Jaap Keuter <jaap.keuter@xxxxxxxxx>]

On 5 Jul 2018, at 16:03, Graham Bloice <graham.bloice@xxxxxxxxxxxxx> wrote:

On Thu, 5 Jul 2018 at 14:43, Mike Cross via Wireshark-users <wireshark-users@xxxxxxxxxxxxx> wrote:

Hi,

When I run 'sudo tcpdump' I can see packets.

When I run 'sudo wireshark' I can see adapter "enp4s0" but it has a
message saying /usr/share/wireshark/init.lua:44: dofile has been
disabled due to running Wireshark as SuperUser.

When I run Wireshark from the GUI, it does not list any of the adapters
I am familiar with, but things like "Cisco" "randpkt" and "ssh" ...

How do I get it to see the real NIC?


Thanks,

See the Wireshark Wiki page on Capture Privileges (https://wiki.wireshark.org/CaptureSetup/CapturePrivileges) for ways to enable non-root users to capture traffic.

--

Graham Bloice

More specifically: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob_plain;f=debian/README.Debian;hb=HEAD

Where the gist is to reconfigure the package: sudo dpkg-reconfigure wireshark-common

Thanks,

Jaap