Hi Chuck,
You'll need root like priviledges to be able to open the raw socket
for packet capture. There are two ways to do this:
Most common is to run Wireshark as root (through sudo or alike). This
is actually least preferable solution since it's only dumpcap that
needs elevated priviledges.
The best way to do this is to configre the build with --enable-setuid-
install, which builds dumpcap setuid root.
I don't know if this survives in RPM build, so you can always do that
afterwards: # chmod +s dumpcap
You can try that with your current build as well to see if it works.
Thanx,
Jaap
Sent from my iPhone
On 10 jul 2009, at 03:49, Chuck Crisler <charles.crisler@xxxxxxxxxxx>
wrote:
Hello! I have used wireshark and pcap on Windows but this is my first
time on Linux. Initially I downloaded, configured, built and installed
the source. Then I used add/remove software (should have done that
first!). I also loaded libpcap-14:0.9.8-f.fc10 (redhat) and
libpcap-devel-14:0.9.8-3.fc10. When I start wireshark, I get the 1.2.0
version. However, if I click on capture/interface list, the list of
interfaces is empty. Yes, I do have a NIC and am connected to a
network. :-) I think pcap is NOT running. I have briefly looked at the
FAQs and docs and pcap man page but didn't see anything relevant to
start it (or even to verify if that is my problem). I would really
appreciate any help.
TIA!
Chuck
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx
>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?
subject=unsubscribe
