As the wireshark wiki states, it's not good to run Wireshark as root because the packet analysers may be insecure. The proper way to do this is to use: sudo dumpcap -w dumpfile
And then open the dumpfile in wireshark. You can optionally include "-i eth0" in the dumpcap command to select the right interface. Any filtering can be done from within wireshark. Instead of dumpcap you can also use tcpdump as wireshark should be able to read those dumps. More information: http://wiki.wireshark.org/Security#head-ac69042aeeb98cdaed2ec2ff1bd2c983fa03cffd http://wiki.wireshark.org/CaptureSetup/CapturePrivileges I consider it a bug because the window freezes, not that it is not possible to start capturing or that the "run as root" menu item has gone. -- wireshark grey window since Hardy https://bugs.launchpad.net/bugs/222264 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
