

If you are logged in as a regular, non-root user, you need sudo rights to use the TShark utility. If the Wireshark package is installed, check whether the TShark utility is installed and, if so, which version: ~]$ tshark -vīuilt using gcc 9.0.1 20190312 (Red Hat ~]$ ~]$ cat /etc/fedora-releaseįedora release 30 ~]$ Check your installationįirst, ensure the required packages are installed: ~]$ rpm -qa | grep -i ~]$

Also, I am using Fedora for these examples. For any changes to TShark's command-line options or flags, please refer to the appropriate man pages and online documentation. To try the examples in this article, you need to be connected to the internet. However, it also provides a powerful command-line utility called TShark for people who prefer to work on the Linux command line. Wireshark is a popular open source graphical user interface (GUI) tool for analyzing packets.

To understand these protocols, you need a tool that can capture and help you analyze these packets. Right now, while you are reading this article, numerous packets are being exchanged by your computer and traveling across the internet. Most of the time when we connect to the internet, we don't think about the network protocols at work underneath that make it all possible. When you're back in it should let you start sniffing without any fuss about being root. Run this: sudo adduser $USER wiresharkĪnd restart or log out. Then you just need to add the user to that group. Technically any person with access to a computer logged in with a wireshark account will be able to sniff. This is obviously more secure than just letting anybody sniff but does mean there's no password checking. Anybody in that group will be able to sniff without being root. That's what we're aiming for, so select Yes and hit return. This will ask you if you want to allow non-root user to be able to sniff. In a terminal (very important that you're in a terminal, not just the Alt+F2 dialogue) run this: sudo dpkg-reconfigure wireshark-common The bit that normally needs root is the packet collection application and this can be configured to allow certain people to use it without sudo, gksu, etc.
