Re: [Bulk] Re: ethereal^Wwireshark, take 872

2014-08-14 Thread Nigel Taylor
On 08/13/14 11:35, Stuart Henderson wrote: On 2014/08/13 10:12, Kevin Chadwick wrote: previously on this list Nigel Taylor contributed: I seem to recall it might have been me that put this there or at least an older version. You don't capture with wireshark, you use it as a graphical

Re: [Bulk] Re: ethereal^Wwireshark, take 872

2014-08-14 Thread Kevin Chadwick
On Thu, 14 Aug 2014 12:40:10 +0100 Nigel Taylor wrote: This does work sudo tcpdump -s 1500 -w - | wireshark -k -i - User needs to be in the _wireshark group, you can remove the suid from /usr/local/bin/dumpcap, the suid is only required if doing captures with dumpcap. Aye, I must be

Re: [Bulk] Re: ethereal^Wwireshark, take 872

2014-08-14 Thread Stuart Henderson
On 2014/08/14 17:07, Kevin Chadwick wrote: On Thu, 14 Aug 2014 12:40:10 +0100 Nigel Taylor wrote: This does work sudo tcpdump -s 1500 -w - | wireshark -k -i - User needs to be in the _wireshark group, you can remove the suid from /usr/local/bin/dumpcap, the suid is only required

Re: [Bulk] Re: [Bulk] Re: ethereal^Wwireshark, take 872

2014-08-14 Thread Kevin Chadwick
On Thu, 14 Aug 2014 21:30:33 +0100 Stuart Henderson wrote: p.s. I couldn't find the wireshark group mentioned anywhere in a pkg-readme or pkg_info -M The readme could do with a quick mention of nosuid mounts, but other than that I thought it was pretty clear.. Perfectly clear. I

Re: [Bulk] Re: ethereal^Wwireshark, take 872

2014-08-13 Thread Kevin Chadwick
previously on this list Nigel Taylor contributed: I seem to recall it might have been me that put this there or at least an older version. You don't capture with wireshark, you use it as a graphical display tool only. Using tcpdump to create a file. The other way is to pipe tcpdump

Re: [Bulk] Re: ethereal^Wwireshark, take 872

2014-08-13 Thread Stuart Henderson
On 2014/08/13 10:12, Kevin Chadwick wrote: previously on this list Nigel Taylor contributed: I seem to recall it might have been me that put this there or at least an older version. You don't capture with wireshark, you use it as a graphical display tool only. Using tcpdump to create

ethereal^Wwireshark, take 872

2014-07-13 Thread Landry Breuil
Hi, so it's been a while this hasn't been debated, and i think the general consensus is now 'why are we applying stronger stance against wireshark compared to other monsters in the tree?' - right now, ppl are either installing it themselves from source, not updating it, running it as root,

Re: ethereal^Wwireshark, take 872

2014-07-13 Thread Vadim Zhukov
2014-07-13 17:50 GMT+02:00 Landry Breuil lan...@rhaalovely.net: Hi, so it's been a while this hasn't been debated, and i think the general consensus is now 'why are we applying stronger stance against wireshark compared to other monsters in the tree?' - right now, ppl are either installing

Re: ethereal^Wwireshark, take 872

2014-07-13 Thread Giovanni Bechis
On Sun, Jul 13, 2014 at 05:50:46PM +0200, Landry Breuil wrote: Hi, so it's been a while this hasn't been debated, and i think the general consensus is now 'why are we applying stronger stance against wireshark compared to other monsters in the tree?' - right now, ppl are either installing

Re: ethereal^Wwireshark, take 872

2014-07-13 Thread Brad Smith
On 13/07/14 11:50 AM, Landry Breuil wrote: Hi, so it's been a while this hasn't been debated, and i think the general consensus is now 'why are we applying stronger stance against wireshark compared to other monsters in the tree?' - right now, ppl are either installing it themselves from

Re: ethereal^Wwireshark, take 872

2014-07-13 Thread Vadim Zhukov
2014-07-13 18:51 GMT+02:00 Vadim Zhukov persg...@gmail.com: 2014-07-13 17:50 GMT+02:00 Landry Breuil lan...@rhaalovely.net: Hi, so it's been a while this hasn't been debated, and i think the general consensus is now 'why are we applying stronger stance against wireshark compared to other

Re: ethereal^Wwireshark, take 872

2014-07-13 Thread Nigel Taylor
On 07/13/14 16:50, Landry Breuil wrote: Hi, so it's been a while this hasn't been debated, and i think the general consensus is now 'why are we applying stronger stance against wireshark compared to other monsters in the tree?' - right now, ppl are either installing it themselves from