Wireshark installation under CentOS

最新推荐文章于 2024-05-16 19:53:04 发布

zhanglizhuo

最新推荐文章于 2024-05-16 19:53:04 发布

阅读量329

点赞数

本文介绍了如何在Linux系统上安装Wireshark网络协议分析器，并详细解释了配置非root用户使用dumpcap文件的方法，使普通用户也能启动并正常使用Wireshark进行网络包捕获。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Installing wireshark

1. #yum install wireshark

2.#yum install wireshark-gnome

Perform the following steps to allow non-root users access to the dumpcap file so that they can open it for use within wireshark.

$ sudo groupadd wireshark
$ sudo usermod -a -G wireshark saml
$ setcap cap_net_raw,cap_net_admin=eip /usr/sbin/dumpcap

Launching wireshark

Once you've made the above changes you can now launch wireshark. It should be noted that when you run it you'll still be presented with a dialog which makes you think it didn't work, but this is just giving you the opportunity to either run wireshark as yourself, "unprivileged", or as root.

Step #1: After launching, you'll see this dialog.

ss #1

Step #2: If you select unprivileged, you'll be presented with the main wireshark GUI:

ss #2

Step #3: If you select the available devices, you'll notice that you can see these in promiscuous mode, which typically is not an option without the above capabilities changes:

ss #3