diff --git a/poc/examples/tcpdump/README.md b/poc/examples/tcpdump/README.md index 6f40523..de84f51 100644 --- a/poc/examples/tcpdump/README.md +++ b/poc/examples/tcpdump/README.md @@ -3,10 +3,11 @@ Remote tcpdump sniffer with source filtering 1. Add any filter you want to the `tcpdump` command inside `tcpdump.pow` to filter any traffic you don't want to be sniffed! -2. For the sake of simplicity, run `sudo kapow server tcpdump.pow`. In a +2. For the sake of simplicity, run `sudo -E kapow server tcpdump.pow`. In a production environment, `tcpdump` should be run with the appropiate permissions, but kapow can (and should) run as an unprivileged user. -3. In your local machine run: ```bash +3. In your local machine run: + ```bash curl http://localhost:8080/sniff/ | sudo -E wireshark -k -i - ``` Again, for the sake of simplicity, `Wireshark` is running as root. If you don't want