Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using Ubuntu 13.04 but Wireshark won't show me any logs, won't function at all I'm connected to my WiFi, Belkin router.

share|improve this question
A quick workaround, not a solution: You can run wireshark as root: gksudo wireshark. – soulsource Sep 22 '13 at 13:55

Open a terminal by pressing Ctrl+Alt+T and type the following commands:

sudo dpkg-reconfigure wireshark-common

press the right arrow and enter for yes

sudo chmod +x /usr/bin/dumpcap

you should now be able to run it without root and you will be able to capture.

share|improve this answer
+1. It works on 14.04 too. Note: the docs say: "capturing USB packets is not enabled for non-root users by using Linux Capabilities. You have to capture the packets using the method described in I./a., setting the set-user-id permanently using dpkg-statoverride or running Wireshark as root." – J.F. Sebastian Sep 19 '14 at 9:16
It would be great help for newbies, if you can also describe as to what's being done with above commands that make it work – Ahmed Mar 28 '15 at 12:38
IT WORKS on LTS 14.04.... Thank you so much. – ThN May 1 '15 at 5:19

The "No interface can be used for capturing in this system with the current configuration" message commonly appears when you don't have the privileges to access the network interfaces for monitoring. Try opening a terminal and running gksudo wireshark. If several network interfaces appear, it's because when you run wireshark without root permissions you don't have the privileges to monitor.

To fix that, run the following command in a terminal:

sudo setcap CAP_NET_RAW,CAP_NET_ADMIN,CAP_DAC_OVERRIDE+eip /usr/bin/dumpcap
share|improve this answer
"Try opening a terminal and running gksudo wireshark." Please note that this document says "WIRESHARK CONTAINS OVER TWO MILLION LINES OF SOURCE CODE. DO NOT RUN THEM AS ROOT." before doing that. Do the sudo setcap command instead - or use sudo dpkg-reconfigure wireshark-common to have the package set the capabilities for you. – user126192 Feb 18 '14 at 20:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.