linux下wireshark不用sudo权限抓包包

ubuntu安装了wireshark,发现打不开网络接口,后来从网上得知要用sudo从命令行执行,确实可以,但是执行过程中一直要开一个命令行窗口,不爽,想直接用单击图标的方法运行之,在网上查询找到以下两个方法,


1.这个主要涉及到安全的问题,可以开启非超级用户模式,这样就可以直接使用普通用户进行包采集了。具体操作如下:
sudo dpkg-reconfigurewireshark-common(出现一个带颜色的对话框,用方向键把红色指示块移到YES上回车就ok了)
sudo adduser yournamewireshark (把yourname换成你自己的用户名)
这样就可以了~~

2.
First, create awireshark group
:~$ sudo groupaddwireshark
Second, add yourusername to the wireshark group
:~$ sudo usermod -a -Gwireshark yourusername
Third, change groupownership of dumpcap to wireshark group
:~$ sudo chgrpwireshark /usr/bin/dumpcap
Fourth, set filepermissions of dumpcap to 754 (rwx for user, r-x for group)
:~$ sudo chmod 754/usr/bin/dumpcap
Fifth, enable filecapabilities for dumpcap
:~$ sudo setcap'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /usr/bin/dumpcap
You may also need torun dpkg-reconfigure for wireshark-common if you install wireshark or tshark asa package through Synaptic and enable packet capture for non-root users
:~$ sudodpkg-reconfigure wireshark-common

猜你喜欢

转载自blog.csdn.net/y___y___/article/details/46371821