Wireshark-users: Re: [Wireshark-users] Re : Re : files permissions when using dumpcap with Multiple file

From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Fri, 16 Nov 2007 08:15:47 -0800

Patrick ANAT wrote:

> For the second solution with version 0.99.7, there is still a problem:
> the ownership of the calling process of dumpcap will be "root" since
> wireshark is launched with "sudo wireshark".  Then file will still be
> owned by root.  Maybe a solution will be to only use "sudo" with dumpcap
> but not with wireshark

So don't run "sudo wireshark".  The privilege changes in 0.99.7 are intended to
remove the need to run Wireshark and TShark as root.