From 479e3cb13b827d2a7f42fcb6afed53f256cb2878 Mon Sep 17 00:00:00 2001 From: pancho horrillo Date: Fri, 6 Sep 2019 13:54:43 +0200 Subject: [PATCH] Fix markdown and add missing -E param to sudo. --- poc/examples/tcpdump/README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/poc/examples/tcpdump/README.md b/poc/examples/tcpdump/README.md index 6f40523..de84f51 100644 --- a/poc/examples/tcpdump/README.md +++ b/poc/examples/tcpdump/README.md @@ -3,10 +3,11 @@ Remote tcpdump sniffer with source filtering 1. Add any filter you want to the `tcpdump` command inside `tcpdump.pow` to filter any traffic you don't want to be sniffed! -2. For the sake of simplicity, run `sudo kapow server tcpdump.pow`. In a +2. For the sake of simplicity, run `sudo -E kapow server tcpdump.pow`. In a production environment, `tcpdump` should be run with the appropiate permissions, but kapow can (and should) run as an unprivileged user. -3. In your local machine run: ```bash +3. In your local machine run: + ```bash curl http://localhost:8080/sniff/ | sudo -E wireshark -k -i - ``` Again, for the sake of simplicity, `Wireshark` is running as root. If you don't want