View Issue Details

IDProjectCategoryView StatusLast Update
0007329Kali Linux[All Projects] Kali Package Bugpublic2021-09-19 11:20
Reporterneatrubble Assigned Todaniruiz  
Status resolvedResolutionfixed 
Product Version2021.3 
Target VersionFixed in Version 
Summary0007329: Wireshark not opening document when not root
DescriptionPackage kali-menu

When using xdg-open on a pcap or double-clicking a pcap, as a user that is not root or in the wireshark group, Wireshark will open but not the Pcap.

In /usr/share/applications/wireshark.desktop, the Exec line contains %f two times.

According to the documentation at, "A command line may contain at most one %f, %u, %F or %U field code.".

This cause Wireshark to launch but without arguments.

Steps To ReproduceUsing a user that is not in the wireshark group:

1. xdg-open somepcap.pcap
2. (An authentication window will appear to run the application as root)
3. (Wireshark will open, without the document)



2021-09-15 09:32

manager   ~0015209


Following the original Exec parameter for wireshark:
`Exec=sh -c "id -Gn | grep -qw wireshark && wireshark %f || pkexec wireshark %f"`

You are right, freedesktop indicates that a desktop file can only have '%f' once (, so it's only replacing that code the first match. Therefore wireshark only opens files if the user is part of the wireshark group.
I've fixed this and will be uploaded soon, but for now as a workaround you can add your user to the wireshark group (this is now the default in kali)

`sudo usermod $(whoami) -aG wireshark`
You probably need to reboot after adding the user to the group.

Here is the fix


2021-09-19 11:20

administrator   ~0015215

I believe this has been addressed now

Issue History

Date Modified Username Field Change
2021-09-14 19:33 neatrubble New Issue
2021-09-15 09:32 daniruiz Note Added: 0015209
2021-09-15 09:32 daniruiz Assigned To => daniruiz
2021-09-15 09:32 daniruiz Status new => assigned
2021-09-19 11:20 g0tmi1k Note Added: 0015215
2021-09-19 11:20 g0tmi1k Status assigned => resolved
2021-09-19 11:20 g0tmi1k Resolution open => fixed