---
# System prepended metadata

title: '# Wireshark on FCP'
tags: ['#Wireshark #tcpdump #eCPRI']

---

# Using Wireshark with different tmp folder
Wireshark change tmp folder for live capturing packet
* Create some folder: e.g., ``/home/thanhlong_le/wireshark`
* change to root group: `chown -R root:root /home/thanhlong_le/wireshark`
* Set TMPDIR variable: 
`sudo TMPDIR=/home/thanhlong_le/wireshark wireshark`
* Set Xhost to local: `xhost +local:`
* Start Wireshark: `sudo wireshark`

# Using tcpdump has issue:
We observe using tcpdump can cause lost of packet at kernel or interface. So, keep using wireshark for now.