Skip to content

Instantly share code, notes, and snippets.

@benjivesterby

benjivesterby/noroot_tcpdump.sh

Forked from srugano/noroot_tcpdump.sh
Created November 6, 2025 21:17
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save benjivesterby/aaec73f26e0001ad196f74ea7183b63e to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save benjivesterby/aaec73f26e0001ad196f74ea7183b63e to your computer and use it in GitHub Desktop.
Download ZIP
Enable tcpdump for non-root users on Debian/Ubuntu.
Raw
noroot_tcpdump.sh
#!/usr/bin/env bash
# NOTE: This will let anyone who belongs to the 'pcap' group
# execute 'tcpdump'
# NOTE2: User running the script MUST be a sudoer. It is
# convenient to be able to sudo without a password.
sudo groupadd pcap
sudo usermod -a -G pcap $USER
sudo chgrp pcap /usr/sbin/tcpdump
sudo setcap cap_net_raw,cap_net_admin=eip /usr/sbin/tcpdump
sudo ln -s /usr/sbin/tcpdump /usr/bin/tcpdump
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment