Dear Maintainer,

I installed wireshark
sudo apt-get install wireshark

I answered
Should non-superusers be able to capture packets? Yes

I added myself to the user group
adduser user wireshark

I was no able to capture data.

I had to manually set
sudo chmod 4711 /usr/bin/dumpcap

My expecation is that this chmod should be effected by configuration of
wireshark-common.

Best regards

Heinrich Schuchardt

Hi Heinrich,

2015-11-07 16:42 GMT+04:00 Heinrich Schuchardt <xypron.glpk@gmx.de>:
After this step you need to log out an in again to make your session's
group membership include wireshark.
I have just extended README.Debian to make that clear [1].
Setuid bit is used as a fall-back only when Linux Capabilities are
missing but you kernel seems to be OK.

You can check your installation by running getcap, the result should
look similar:
$ /sbin/getcap /usr/bin/dumpcap
/usr/bin/dumpcap = cap_net_admin,cap_net_raw+eip

...
...

Cheers,
Balint

[1]http://anonscm.debian.org/viewvc/collab-maint/ext-maint/wireshark/branches/experimental/debian/README.Debian?view=markup

Hi Heinrich,

2015-11-07 16:42 GMT+04:00 Heinrich Schuchardt <xypron.glpk@gmx.de>:
After this step you need to log out an in again to make your session's
group membership include wireshark.
I have just extended README.Debian to make that clear [1].
Setuid bit is used as a fall-back only when Linux Capabilities are
missing but you kernel seems to be OK.

You can check your installation by running getcap, the result should
look similar:
$ /sbin/getcap /usr/bin/dumpcap
/usr/bin/dumpcap = cap_net_admin,cap_net_raw+eip

...
...

Cheers,
Balint

[1]http://anonscm.debian.org/viewvc/collab-maint/ext-maint/wireshark/branches/experimental/debian/README.Debian?view=markup

Hi,

just tried it on Bullseye and two observations:

* the selection dialog "Should non-superuser be able to capture
  packets?" should make it clearer *how* to answer the choice. I assume
  this is by pressing "y"/"n" and "enter" ? Something like that worked
  for me but the makeup of the dialog is more suggestive of a dialog box
  which usually have other methods of selection.

* in my case not even logging out made non-root capture work but it
  worked after reboot. This may be a peculiarity of Xfce or something
  else but should be mentioned in the README. Or indeed.. if there is a
  known workaround to make it work without reboot/logout it would be
  very nice to mention it there.

* how about asking for a list of users to add to the wireshark group
  during configuration?

Regards
Richard