diff options
Diffstat (limited to 'network/wireshark/README')
| -rw-r--r-- | network/wireshark/README | 20 |
1 files changed, 13 insertions, 7 deletions
diff --git a/network/wireshark/README b/network/wireshark/README index 6725fb5a1e..f275d52cc5 100644 --- a/network/wireshark/README +++ b/network/wireshark/README @@ -1,14 +1,20 @@ Wireshark (aka Ethereal) is a free packet sniffer computer application. It is -used for network troubleshooting, analysis, software and communications -protocol development, and education. In June 2006 the project was +used for network troubleshooting, analysis, software and communications +protocol development, and education. In June 2006 the project was renamed from Ethereal due to trademark issues. -The functionality Wireshark provides is very similar to tcpdump, but it has -a graphical front-end, and many more information sorting and filtering +The functionality Wireshark provides is very similar to tcpdump, but it has +a graphical front-end, and many more information sorting and filtering options. It allows the user to see all traffic being passed over the network -(usually an Ethernet network but support is being added for others) by +(usually an Ethernet network but support is being added for others) by putting the network interface into promiscuous mode. -Wireshark uses the cross-platform GTK+ widget toolkit. Its powerful features -make it the tool of choice for network troubleshooting, protocol development, +Wireshark uses the cross-platform GTK+ widget toolkit. Its powerful features +make it the tool of choice for network troubleshooting, protocol development, and education worldwide. + +If you use a filesystem that supports posix capabilities, an easy way to start +wireshark as normal user, while still providing it with all the access +permissions it requires, is by issuing the following command: + + setcap cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap |