Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Re : Re : files permissions when using dumpcap with Multip

From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Fri, 16 Nov 2007 08:15:47 -0800
Patrick ANAT wrote:

> For the second solution with version 0.99.7, there is still a problem:
> the ownership of the calling process of dumpcap will be "root" since
> wireshark is launched with "sudo wireshark".  Then file will still be
> owned by root.  Maybe a solution will be to only use "sudo" with dumpcap
> but not with wireshark

So don't run "sudo wireshark".  The privilege changes in 0.99.7 are intended to
remove the need to run Wireshark and TShark as root.