Ubuntu – How to enable Wireshark without running as root in Trusty 14.04


I installed Wireshark. Running as root is not recommended, so

I Did

sudo dpkg-reconfigure wireshark-common

According to:



Answered Yes,
Logout out
Started Wireshark and got this message:

couldn't run /usr/bin/dumpcap in child process: Permission Denied.

I think I followed the recommended way of configuring Wireshark, it worked in 13.10, it doesn't in 14.04

FYI, reconfiguring wireshark-common is actually setting the group for dumpcap to Wireshark. Still it doesn't work. I checked that.

How should it be done in 14.04?

Best Answer

  • I found that after running:

    sudo dpkg-reconfigure wireshark-common

    a wireshark group been created in /etc/gshadow. So I just wrote:

    sudo gpasswd -a $USER wireshark

    and logout/login and now it works fine!