ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] dumpcap/tshark permissions on created pcap files

From: luke devon <luke_devon@xxxxxxxxx>
Date: Thu, 17 May 2018 02:51:51 +0000 (UTC)
Hi,

I am trying to use dumpcap/tshark to capture network traces. My operating system is Centos 7, dumpcap running as root. Once I created a file , it has the file permission as follows. 

-rw-r----- 1 root root  62M May 17 09:53 Test_00003_20180517095317.pcap

[root@luke ~]# which dumpcap
/usr/sbin/dumpcap

[root@luke ~]# which tshark
/usr/sbin/tshark

-rwxr-xr-x 1 root root 273976 Nov 20  2015 /usr/sbin/tshark


-rwxr-xr-x 1 root wireshark 82328 Nov 20  2015 /usr/sbin/dumpcap


I am sharing these captured pcaps via samba with some windows users. Now those files are unable to download as the files doesnt have proper permission.

How can I fix this ? what is the root cause for it ? Please help.

Thank you
Luke.