search

w4sp-book / w4sp-lab

Lab environment for the Wireshark for Security Professionals book
https://github.com/w4sp-book/w4sp-lab/wiki/Lab-Installation
71 stars 42 forks source link

Problem starting Wireshark #34

Open muddy-13 opened 6 years ago

muddy-13 commented 6 years ago

I have the lab all set up - and as Chapter 4 page 134 states and expects when starting Wireshark - I had the error: 'couldn't run /usr/bin dumpcap in child process permission denied`

The remedy listed on page 134 has a typo - it says: sudo setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /user/bin/dumpcap

of course that throws an error - the folder is: /usr/bin/ not: /user/bin So I ran the command as the folder should be with /usr/bin/dumpcap Double checking - there is no user/bin created in the labs.. so the call should be to /usr/bin/.

But then when I went to start Wireshark I get the same error - tried running it before and after opening Wireshark is loaded so I can't do the labs. Anybody run into this or have a suggestion. Looks like somebody put a lot of work into this - hate to see it wasted effort... on their part and mine - already read the whole book . Loved it - but frustrated and disappointed I can't get to run the promising labs and run Wireshark at the same time.... kind of funny since it is a book about Wireshark

freemike74 commented 6 years ago

I solved with:

sudo dpkg-reconfigure wireshark-common sudo gpasswd -a $USER wireshark sudo setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /user/bin/dumpcap