Page 1 of 1

Any hint about using WireShark under Linux?

Posted: Mon Aug 21, 2017 5:02 pm
by Giovanni
I am installing it on Mint using the SW manager, I am getting permission errors when trying to select usbmon.

Can anybody help?

Giovanni

Re: Any hint about using WireShark under Linux?

Posted: Mon Aug 21, 2017 5:55 pm
by utzig
Hi, I use Arch Linux and there were some permission errors on files/dirs to get wireshark running for a non-priviledged user:

/sys/kernel/debug was not accessible, fix:

Code: Select all

$ sudo chmod 755 /sys/kernel/debug


/usr/bin/dumpcap which used by wireshark was also not able to run as non-root, fix:

Code: Select all

$ sudo chmod 755 /usr/bin/dumcap


Also you have to be sure to load usbmon:

Code: Select all

$ sudo modprobe usbmon


That's what got everything working for me. If none of those fix the problem, try running as root (sudo wireshark) to be sure it works.

Re: Any hint about using WireShark under Linux?

Posted: Tue Aug 22, 2017 8:31 am
by DeusExMachina
also you may try running WireShark under root

Code: Select all

sudo wireshark
ugly, but for the casual usage it is fine

Re: Any hint about using WireShark under Linux?

Posted: Tue Aug 22, 2017 8:36 am
by Giovanni
Thanks both,

I had to assign the group wireshark to my user and change permissions on the USB pipes under usbmon but now it is working without having to work as root.

It is good at decoding protocols but apparently it is not able to give details about the setup phase. I need to find a cheap USB analyzer for that.

Giovanni