Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-12 Thread Jeff Morriss
On Thu, Feb 7, 2019 at 7:51 AM Graham Bloice wrote: > On Thu, 7 Feb 2019 at 10:34, Dario Lombardo wrote: > >> +1 from me for this as well. The warning should be there for anyone not >>> realizing that this is dangerous, but having the option to mute that >>> warning for people who know (or

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-07 Thread Graham Bloice
On Thu, 7 Feb 2019 at 10:34, Dario Lombardo wrote: > +1 from me for this as well. The warning should be there for anyone not >> realizing that this is dangerous, but having the option to mute that >> warning for people who know (or think they do) what they're doing makes >> sense. >> >> My only

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-07 Thread Dario Lombardo
> > +1 from me for this as well. The warning should be there for anyone not > realizing that this is dangerous, but having the option to mute that > warning for people who know (or think they do) what they're doing makes > sense. > > My only concern is that if we expect the distribution people to

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-07 Thread Jasper Bongertz
Title: Re: [Wireshark-dev] Wireshark on Kali linux On Wed, 6 Feb 2019 at 17:32, Guy Harris <g...@alum.mit.edu> wrote: So the question is whether we should print/pop up a message if TShark/Wireshark is running as root - and, if we do, whether we should have a compile or configu

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-07 Thread Dario Lombardo
On Wed, Feb 6, 2019 at 11:26 PM João Valverde < joao.valve...@tecnico.ulisboa.pt> wrote: > > I think a warning for "running Wireshark/tshark as root is dangerous" is > very appropriate. There is a legitimate discussion to be had on whether > it should be more or less forceful and what to do about

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-06 Thread João Valverde
On 06/02/19 17:31, Guy Harris wrote: On Feb 6, 2019, at 5:06 AM, Peter Wu wrote: On Wed, Feb 06, 2019 at 12:46:20PM +, João Valverde wrote: I have some doubts about the effectiveness and usefulness of this Lua sandbox. I didn't investigate in depth but it seems enabling/disabling the

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-06 Thread Graham Bloice
On Wed, 6 Feb 2019 at 17:32, Guy Harris wrote: > > > > So the question is whether we should print/pop up a message if > TShark/Wireshark is running as root - and, if we do, whether we should have > a compile or configuration option to disable that, so it can be disabled on > Kali Linux or other

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-06 Thread Guy Harris
On Feb 6, 2019, at 5:06 AM, Peter Wu wrote: > On Wed, Feb 06, 2019 at 12:46:20PM +, João Valverde wrote: > >> I have some doubts about the effectiveness and usefulness of this Lua >> sandbox. I didn't investigate in depth but it seems enabling/disabling the >> Lua runtime instead would be

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-06 Thread Peter Wu
On Wed, Feb 06, 2019 at 12:46:20PM +, João Valverde wrote: > > > On 06/02/19 09:08, Dario Lombardo wrote: > > > This would mean that they'd have to build Wireshark differently from > > the default way it's built, using the "package for systems that run > > everything as root" option.  That

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-06 Thread João Valverde
On 06/02/19 09:08, Dario Lombardo wrote: > This would mean that they'd have to build Wireshark differently from the default way it's built, using the "package for systems that run everything as root" option.  That means a standard Debian package, built to run on a system where you *don't*

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-06 Thread Dario Lombardo
> This would mean that they'd have to build Wireshark differently from the default way it's built, using the "package for systems that run everything as root" option. That means a standard Debian package, built to run on a system where you *don't* run everything as root, so that you can leave the

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-05 Thread João Valverde
On 05/02/19 23:50, Guy Harris wrote: On Feb 5, 2019, at 2:52 PM, João Valverde wrote: On 05/02/19 16:48, Dario Lombardo wrote: Possible solutions: - don't enable this error for console.lua By which you presumably mean something more general, such as "don't enable this error for

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-05 Thread Guy Harris
On Feb 5, 2019, at 2:52 PM, João Valverde wrote: > On 05/02/19 16:48, Dario Lombardo wrote: > Possible solutions: > - don't enable this error for console.lua By which you presumably mean something more general, such as "don't enable this error for scripts that are distributed as part of

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-05 Thread João Valverde
On 05/02/19 16:48, Dario Lombardo wrote: Hi Today I found out an annoying issue on kali. It ships with a pretty new version of wireshark, but when you launch it, an issue raises. This post describes the issue and proposes a fix, too.

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-05 Thread Guy Harris
On Feb 5, 2019, at 2:08 PM, Dario Lombardo wrote: > Yes. Kali Linux is a very popular distribution for pentesting. Most of the > software it ships requires root privileges, hence they just use root. OK, so at least they're not doing something stupid such as specifically running Wireshark as

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-05 Thread Dario Lombardo
Yes. Kali Linux is a very popular distribution for pentesting. Most of the software it ships requires root privileges, hence they just use root. It is basically a live distro run from cd/USB or in a VM. Usually it's not installed on the hard drive and when a new version is available it is just

Re: [Wireshark-dev] Wireshark on Kali linux

2019-02-05 Thread Guy Harris
On Feb 5, 2019, at 8:48 AM, Dario Lombardo wrote: > I know that the problem is how kali runs wireshark (as root) and that it > should be avoided, but this is how kali works Kali Linux has no user accounts, so you log in as root and thus everything runs as root?