Question

I installed wireshark (tshark) using

sudo apt-get install tshark

this installed the tshark executable in /usr/bin/tshark.

The problem now is that I am unable to run it without root permissions. How can I execute this command using the permissions of a normal user?

Answer 1

The Wireshark wiki discusses permissions and ways to "circumvent" them if needed - although I'm pretty sure that any packet capturing on Linux would require root at some level.

Answer 2

It will probably need root credential to put the network card into premiscious mode. You need to set the user id http://www.zzee.com/solutions/linux-permissions.shtml#setuid or run it with sudo. Sudo is the better, more secure, option.