It’s often nessesary to run wireshark with user rights.

Installation

Install wireshark, for Fedora&RH Based distributions:

yum install wireshark-gnome

Create a new user group

groupadd wireshark

Adding the users to the new group: edit /etc/group or use gpasswd

wireshark:x:6668:user1,user2

Permissions of dumpcap

change the permissions and owner of dumpcap

chown root:wireshark `which dumpcap`
chmod 6550 `which dumpcap`

In RH Based distros consolehelper is used as wrapper to prompt for root password for applications, which need root permissions.

ls -l /usr/bin/wireshark

We don’t need it anymore, so we change this symlink.

unlink /usr/bin/wireshark
ln -s /usr/sbin/wireshark /usr/bin/wireshark

From now we start the right wireshark application