Re: dumpcap/tshark permissions on created pcap files

[Guy Harris <guy () alum mit edu>]

On May 16, 2018, at 7:51 PM, luke devon via Wireshark-users <wireshark-users () wireshark org> wrote:

> How can I fix this ?

Run

        chmod o+r Test_00003_20180517095317.pcap

as root to give "other" read permission on the file.

> what is the root cause for it ?

You ran dumpcap as root (or you ran tshark as root, and *it* ran dumpcap, so dumpcap also ran as root), so the file it 
creates is owned by root, group root, and root probably has a umask of 0026 or 0027, so, by default, files are created 
with group write permission, and *all* other permissions, turned off.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe