You could also use tcpdump for this purpose. dumpfile", which will dump the packets to the file "dumpfile" in the current working directory. A much safer solution would be to su(1) to root, then use the bundled dumpcap to dump the data (for example, you can evoke dumpcap by using "dumpcap -w. However, this remains unsecure as the dissectors, the parts of Wireshark which parse the captured data, run with root privileges as they did before. Please note that you don't have to login as root when starting your computer, you can use su(1) or sudo( for that purpose. Therefore, you have to have root privileges when starting Wireshark, else you can't capture data. Running Wireshark (or any other network capture/analyzer, for that matter) on Linux needs root privileges.
0 kommentar(er)
