Ask Ubuntu is a question and answer site for Ubuntu users and developers. It only takes a minute to sign up.
Sign up to join this community
I've installed Wireshark in Ubuntu 16.04 with the command:
sudo apt-get install wireshark
After program start, Start Capture and Stop Capture buttons are disabled. Even opening Capture Options window, I can't see any interfaces to capture packets from. They don't show even with menu Capture > Refresh Interfaces.
Where are all machine's interfaces?
Edit:
I also noticed there's a message in the main screen:
Couldn't run /usr/bin/dumpcap in child process: Permission denied
Even though you could run wireshark as root, it should be avoided.
Instead, try this:
sudo dpkg-reconfigure wireshark-common
Select YES to the question
Then add your user to newly created wireshark group with this
sudo adduser $USER wireshark
Finally log out, and log back in and you should be able to capture packets.
No to question issued by sudo dpkg-reconfigure wireshark-common, even with my user in wireshark system group, I can see interfaces but can't capture through those.
– Thiago Rider Augusto
Jul 7 '16 at 17:57
YES to the question
– jiipeezz
Jul 7 '16 at 18:01
YES allows even users not in wireshark group or just added users?
– Thiago Rider Augusto
Jul 7 '16 at 18:06
sudo. The output forsudo wiresharkisNo protocol specified/QXcbConnection: Could not connect to display :0/Aborted (core dumped)– Thiago Rider Augusto Jul 7 '16 at 17:27