Installing Wireshark on Ubuntu 12.

04
LTS
Posted on September 17, 2012
Installing wireshark on Ubuntu 12.04 LTD and limiting packet capture to one group, in
this case the group wireshark. Im sure you can use these instructions for other
debian based distributions.
Although youll have to take it as read that Ive only tested it on Ubuntu, feel free to let
me know if it doesnt and Ill amend the instructions to suit.
First, we install Wireshark from the terminal.
I NSTALLI NG WI RESHARK
sudo apt-get install wireshark
The Internet made me do it!
Billys little bit of the web
Page 1 of 8 Installing Wireshark on Ubuntu 12.04 LTS | The Internet made me do it!
12/09/2014 http://www.dickson.me.uk/2012/09/17/installing-wireshark-on-ubuntu-12-0...
If you run wireshark as a non root user at this stage (see image above), you will get
the message No interface can be used for capturing in this system with the current
configuration.. The following steps will rectify this.
Create the wireshark group.
Add your username to the wireshark group
Change the group ownership of file dumpcap to wireshark
Change the mode of the file dumpcap to allow execution by the group wireshark
Grant capabilities with setcap
Verify the change
At this point, you will need to log out, then back into Unity (Thanks for Jorge for
pointing this out).
You should now be able to run Wireshark as a non-root user, just as long as that user
is part on the wireshark group, everything should just work.
References:
Capture, Capture Privileges for Wireshark
Wireshark Documention
Tavshed Playing with Technology
No interface issue on Wireshark
SHARE THI S:
Email Print Google Pocket LinkedIn 1 Twitter
More
GOOGLE+
Billy Dickson
sudo groupadd wireshark
sudo usermod -a -G wireshark YOUR_USER_NAME
sudo chgrp wireshark /usr/bin/dumpcap
sudo chmod 750 /usr/bin/dumpcap
sudo setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap
sudo getcap /usr/bin/dumpcap

Follow 32
Page 2 of 8 Installing Wireshark on Ubuntu 12.04 LTS | The Internet made me do it!
12/09/2014 http://www.dickson.me.uk/2012/09/17/installing-wireshark-on-ubuntu-12-0...
19 THOUGHTS ON INSTALLING WIRESHARK ON UBUNTU 12.04 LTS
This entry was posted in Computing Tips, Linux and tagged Ubuntu Precise
Pangolin 12.04 LTS, Wireshark by Billy Dickson. Bookmark the permalink
[http://www.dickson.me.uk/2012/09/17/installing-wireshark-on-ubuntu-12-04-
lts/] .
LI KE THI S:
Like
2 bloggers like this.

RELATED
Installing FreeNX
server on 12.04 Precise
Pangolin
Installing FreeNX on
Ubuntu Lucid Lynx
10.04
How to - Install FreeNX
on Ubuntu Feisty
lejurassienfou
on February 10, 2013 at 10:39 am said:
il manque une dernire commande pour que a fonctionne rellement!
sudo chmod +xs /usr/bin/dumpcap
jorge
on February 13, 2013 at 8:52 pm said:
dont works, this appears
Couldnt run /usr/bin/dumpcap in child process Permission denied
opening the wireshark and, no interface can be used
please help me
Page 3 of 8 Installing Wireshark on Ubuntu 12.04 LTS | The Internet made me do it!
12/09/2014 http://www.dickson.me.uk/2012/09/17/installing-wireshark-on-ubuntu-12-0...
billy
on February 14, 2013 at 7:28 am said:
Hi Jorge,
Try logging out, then back in again before starting wireshark. My fault, Ill
amend the instructions above.
Billy.
billy
on February 14, 2013 at 7:38 am said:
Hi lejurassienfou,
That command shouldnt be needed to get wireshark to work, Im happy for
you to explain why it is needed though. If you can persuade me, Ill happily
add it and credit you
Cheers,
Billy
kamote
on February 22, 2013 at 6:28 am said:
no need to run all those command, all you have to do is open a terminal, type;
sudo -s then type your password, then type; wireshark . but hey thanks
for explaining most of the details here
Page 4 of 8 Installing Wireshark on Ubuntu 12.04 LTS | The Internet made me do it!
12/09/2014 http://www.dickson.me.uk/2012/09/17/installing-wireshark-on-ubuntu-12-0...
billy
on February 22, 2013 at 6:43 am said:
Pierpaolo
on May 17, 2013 at 12:42 pm said:
Thank you so much guys !!!
Mark
on June 20, 2013 at 1:02 pm said:
Thanks for the instructions. They worked perfectly.
Balint Reczey
on August 14, 2013 at 4:27 pm said:
Hi,
Instead of creating the wireshark group and setting up dumpcap manually
please follow /usr/share/doc/wireshark-common/README.Debian as
suggested at:
http://superuser.com/questions/319865/how-to-set-up-wireshark-to-run-
without-root-on-debian
Page 5 of 8 Installing Wireshark on Ubuntu 12.04 LTS | The Internet made me do it!
12/09/2014 http://www.dickson.me.uk/2012/09/17/installing-wireshark-on-ubuntu-12-0...
The correct steps are:
sudo dpkg-reconfigure wireshark-common
usermod -a -G wireshark your-user-name
Cheers,
Balint
Billy Dickson
on August 19, 2013 at 5:45 am said:
Will give that a test at some point. Thanks for the info.
Cheers,
Billy
Dave Coleman
on August 19, 2013 at 6:28 pm said:
Worked perfectly, thanks so much!
Mohammed JH
on September 5, 2013 at 3:10 pm said:
I dont understand why is it giving me an error Wireshark:17402): Gtk-
Warning **: cannot open display:
I tried everything but nothing works. Anyone have any idea?
Page 6 of 8 Installing Wireshark on Ubuntu 12.04 LTS | The Internet made me do it!
12/09/2014 http://www.dickson.me.uk/2012/09/17/installing-wireshark-on-ubuntu-12-0...
Banchie (@xtas420)
on September 12, 2013 at 2:48 am said:
Same for me but I guess its because I dont have any GUI / X like
KDE/Gnome/Fluxbox
I think thats the problem.
gioni
on October 19, 2013 at 5:29 am said:
It works, thanks!!
Bayarkhuu Lodoidamba
on February 7, 2014 at 5:42 am said:
thanks
bgarza47
on February 27, 2014 at 12:55 am said:
Thank you so much!! Im new to Ubuntu and you gave a great explanation!
Page 7 of 8 Installing Wireshark on Ubuntu 12.04 LTS | The Internet made me do it!
12/09/2014 http://www.dickson.me.uk/2012/09/17/installing-wireshark-on-ubuntu-12-0...
facugonzalez
on July 7, 2014 at 6:55 pm said:
thanks : )
donie
on July 28, 2014 at 2:21 pm said:
sudo chmod 4755 /usr/bin/dumpcap
Billy Dickson
on July 29, 2014 at 9:10 am said:
I prefer having a bit more control, and using the appropriate group seems a
bit more elegant. Im not that keen on giving everyone read and execute
access. Each to their own I suppose.
Page 8 of 8 Installing Wireshark on Ubuntu 12.04 LTS | The Internet made me do it!
12/09/2014 http://www.dickson.me.uk/2012/09/17/installing-wireshark-on-ubuntu-12-0...