[ILUG] Ethereal

[Colm MacCarthaigh]

On Wed, Mar 23, 2005 at 02:22:45AM +0000, Linux ilug wrote:
> Lads, Does anyone know how to run ethereal as a user and not as root. 

You need create an ethernet tap, as root - but let the desired
non-root user own the tap.

	tunctl -t tap0 -u nonrootuser	

You then need to bridge this tap with the interface you want to
be able to sniff;

	brctl addbr br0
	brctl addif br0 tap0
	brctl addif br0 eth0

Of course you need to have tap/tun and bridging built into your kernel
(or loaded as a module), but you should then have a tap you can sniff
away as a non-root user that sees all traffic on eth0.

-- 
Colm MacCárthaigh                        Public Key: colm+pgp at stdlib.net