Wireshark · Wireshark-users: [Wireshark-users] dumpcap/tshark permissions on created pcap files

[luke devon <luke_devon@xxxxxxxxx>]

Hi,

I am trying to use dumpcap/tshark to capture network traces. My operating system is Centos 7, dumpcap running as root. Once I created a file , it has the file permission as follows. 

-rw-r----- 1 root root  62M May 17 09:53 Test_00003_20180517095317.pcap

[root@luke ~]# which dumpcap

/usr/sbin/dumpcap

[root@luke ~]# which tshark

/usr/sbin/tshark

-rwxr-xr-x 1 root root 273976 Nov 20  2015 /usr/sbin/tshark

-rwxr-xr-x 1 root wireshark 82328 Nov 20  2015 /usr/sbin/dumpcap

I am sharing these captured pcaps via samba with some windows users. Now those files are unable to download as the files doesnt have proper permission.

How can I fix this ? what is the root cause for it ? Please help.

Thank you

Luke.