# Using Wireshark with different tmp folder
Wireshark change tmp folder for live capturing packet
* Create some folder: e.g., ``/home/thanhlong_le/wireshark`
* change to root group: `chown -R root:root /home/thanhlong_le/wireshark`
* Set TMPDIR variable:
`sudo TMPDIR=/home/thanhlong_le/wireshark wireshark`
* Set Xhost to local: `xhost +local:`
* Start Wireshark: `sudo wireshark`

# Using tcpdump has issue:
We observe using tcpdump can cause lost of packet at kernel or interface. So, keep using wireshark for now.