Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I've made all steps described in wiki.wireshark.org/CaptureSetup/CapturePrivileges, but I still get next error message

There are no interfaces on which a capture can be done.

Where I've made a mistake?

$ groups dima
lp wheel games video audio optical storage power wireshark users
$ ls -l /usr/bin/dumpcap 
-rwxr-xr-- 1 root wireshark 77000 Jul 29 12:07 /usr/bin/dumpcap
$ getcap /usr/bin/dumpcap 
/usr/bin/dumpcap = cap_net_admin,cap_net_raw+eip
share|improve this question
    
What does strace dumpcap -D print? –  Guy Harris Aug 7 '13 at 7:11
add comment

2 Answers

You should add your user to a wireshark group, add the dumpcap to wireshark group and add permissions to dumpcap

   # chgrp wireshark /usr/bin/dumpcap
   # chmod 7450 /usr/bin/dumpcap

The path can be /usr/bin/dumpcap or /usr/sbin/dumpcap

share|improve this answer
1  
Don't you need to sudo those commands, since you're running as a user? –  Canadian Luke Jan 24 at 17:02
    
"You should add your user to a wireshark group". He is in that group - see the output of "groups dima", which includes "wireshark". And dumpcap does have extra privileges - see the output of "getcap /usr/bin/dumpcap". The question is whether those privileges are working; that's why I asked him to try strace dumpcap -D, to see what dumpcap is trying to do when you ask it to list devices. –  Guy Harris Jan 24 at 23:40
add comment

Try doing the capture using tcpdump at the command line, then open the resulting pcap file with Wireshark or something else. Like so:

sudo tcpdump -w test.pcap -vv -i wlan0
share|improve this answer
    
If Wireshark isn't showing any devices, dumpcap probably isn't showing any devices, which means that dumpcap probably can't open any devices, which means that there's a good chance that tcpdump can't open any devices, either. (BTW, "-v" is pointless with "-w" - "-w" means "save packets to a file rather than printing them", and "-v" means "print packets verbosely.) –  Guy Harris Jan 24 at 23:42
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.