On Thu, Dec 07, 2000 at 09:49:54AM -0600, McNutt, Justin M. wrote:
> When that happens on my unix box, it's because I'm not the super-user. Do
> you have to be Administrator (or equivalent) on NT in order to do packet
> captures?
No. As the WinPcap FAQ at
http://netgroup-serv.polito.it/winpcap/misc/faq.htm
says:
Q-5: Do I need to be Administrator in order to execute programs
based on WinPcap?
A: No. Unlike the libpcap, WinPcap does not require that the
program has been launched by an Administrator. However,
remember that you must be administrator to install the packet
driver.
(although, on many UNIX-flavored OSes, you *can* arrange to make
Ethereal not require that you be root by changing the permissions on the
appropriate device or devices in "/dev" - what those devices are depends
on the particular OS - although, on the Linux and Irix flavors, there's
no such device; I don't know if it can be done on Irix, but, *if*
there's some way to specify that an account be given a particular
"capability" on Linux, giving your account the CAP_NET_RAW capability
should let you capture packets on Linux without being root).
