Wireshark-users: [Wireshark-users] dumpcap/tshark permissions on created pcap files
From: luke devon <[email protected]>
Date: Thu, 17 May 2018 02:51:51 +0000 (UTC)

I am trying to use dumpcap/tshark to capture network traces. My operating system is Centos 7, dumpcap running as root. Once I created a file , it has the file permission as follows. 

-rw-r----- 1 root root  62M May 17 09:53 Test_00003_20180517095317.pcap

[[email protected] ~]# which dumpcap

[[email protected] ~]# which tshark

-rwxr-xr-x 1 root root 273976 Nov 20  2015 /usr/sbin/tshark

-rwxr-xr-x 1 root wireshark 82328 Nov 20  2015 /usr/sbin/dumpcap

I am sharing these captured pcaps via samba with some windows users. Now those files are unable to download as the files doesnt have proper permission.

How can I fix this ? what is the root cause for it ? Please help.

Thank you