Wireshark-dev: [Wireshark-dev] Problems with capturing on multiple interfaces
From: Joerg Mayer <[email protected]>
Date: Thu, 19 May 2011 18:57:26 +0200
iHello Michael,

I just tried to do capture on multiple interfaces. dumpcap is suid root.

[email protected]:~/work/wireshark/svn/build> dumpcap -i ppp0  -t
File: /tmp/wireshark_ppp0_20110519185613_vsDXd7
Packets: 2 ^CPackets captured/dropped on interface ppp0: 2/0
[email protected]:~/work/wireshark/svn/build> dumpcap -i lo  -t
File: /tmp/wireshark_lo_20110519185621_GFHuue
Packets: 2 ^CPackets captured/dropped on interface lo: 4/0
[email protected]:~/work/wireshark/svn/build> dumpcap -i lo -i ppp0  -t
The capture session could not be initiated (ppp0: You don't have permission to capture on that device (socket: Operation not permitted)).
Please check to make sure you have sufficient permissions, and that you have the proper interface or pipe specified.

Why do I run into a permission problem once I specify more than
one interface?

Joerg Mayer                                           <[email protected]>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.