How to wireshark with user rights

It's often nessesary to run wireshark with user rights.

For Fedora&RH Based distributions:

yum install wireshark-gnome

groupadd wireshark

/etc/group

wireshark:x:6668:user1,user2

change the permissions and owner of dumpcap

chown root:wireshark `which dumpcap`
chmod 6550 `which dumpcap`

In RH Based distros consolehelper is used as wrapper to prompt for root password for applications, which need root permissions.

ls -l /usr/bin/wireshark

We don't need it anymore, so we change this symlink.

unlink /usr/bin/wireshark
ln -s /usr/sbin/wireshark /usr/bin/wireshark

From now we start the right wireshark application

• http://wiki.wireshark.org/CaptureSetup/CapturePrivileges
• http://wiki.wireshark.org/Development/PrivilegeSeparation