{"action":"created","issue":{"url":"https://api.github.com/repos/Homebrew/homebrew/issues/42280","labels_url":"https://api.github.com/repos/Homebrew/homebrew/issues/42280/labels{/name}","comments_url":"https://api.github.com/repos/Homebrew/homebrew/issues/42280/comments","events_url":"https://api.github.com/repos/Homebrew/homebrew/issues/42280/events","html_url":"https://github.com/Homebrew/homebrew/issues/42280","id":98286407,"number":42280,"title":"formula Suricata: run without sudo","user":{"login":"Drewshg312","id":10493450,"avatar_url":"https://avatars.githubusercontent.com/u/10493450?v=3","gravatar_id":"","url":"https://api.github.com/users/Drewshg312","html_url":"https://github.com/Drewshg312","followers_url":"https://api.github.com/users/Drewshg312/followers","following_url":"https://api.github.com/users/Drewshg312/following{/other_user}","gists_url":"https://api.github.com/users/Drewshg312/gists{/gist_id}","starred_url":"https://api.github.com/users/Drewshg312/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Drewshg312/subscriptions","organizations_url":"https://api.github.com/users/Drewshg312/orgs","repos_url":"https://api.github.com/users/Drewshg312/repos","events_url":"https://api.github.com/users/Drewshg312/events{/privacy}","received_events_url":"https://api.github.com/users/Drewshg312/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-07-30T23:34:00Z","updated_at":"2015-07-31T04:01:50Z","closed_at":"2015-07-31T04:01:50Z","body":"Hi. Is there any possibility to run suricata (installed with homebrew) without `sudo`\r\n\r\nI'm getting: \r\n\r\n    $ suricata -c /usr/local/etc/suricata/suricata.yaml -i en2\r\n    Error opening file /var/log/suricata/suricata.log\r\n    30/7/2015 -- 16:05:35 - <Notice> - This is Suricata version 2.0.8 RELEASE\r\n    30/7/2015 -- 16:05:41 - <Error> - [ERRCODE: SC_ERR_PCAP_ACTIVATE_HANDLE(27)] - Couldn't activate the pcap handler, error (cannot open BPF device) /dev/bpf0: Permission denied\r\n    30/7/2015 -- 16:05:41 - <Error> - [ERRCODE: SC_ERR_THREAD_INIT(49)] - thread \"RxPcapen21\" closed on initialization.\r\n    30/7/2015 -- 16:05:41 - <Error> - [ERRCODE: SC_ERR_INITIALIZATION(45)] - Engine initialization failed, aborting...\r\n\r\nAny ideas?\r\n    "},"comment":{"url":"https://api.github.com/repos/Homebrew/homebrew/issues/comments/126561007","html_url":"https://github.com/Homebrew/homebrew/issues/42280#issuecomment-126561007","issue_url":"https://api.github.com/repos/Homebrew/homebrew/issues/42280","id":126561007,"user":{"login":"tdsmith","id":173889,"avatar_url":"https://avatars.githubusercontent.com/u/173889?v=3","gravatar_id":"","url":"https://api.github.com/users/tdsmith","html_url":"https://github.com/tdsmith","followers_url":"https://api.github.com/users/tdsmith/followers","following_url":"https://api.github.com/users/tdsmith/following{/other_user}","gists_url":"https://api.github.com/users/tdsmith/gists{/gist_id}","starred_url":"https://api.github.com/users/tdsmith/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tdsmith/subscriptions","organizations_url":"https://api.github.com/users/tdsmith/orgs","repos_url":"https://api.github.com/users/tdsmith/repos","events_url":"https://api.github.com/users/tdsmith/events{/privacy}","received_events_url":"https://api.github.com/users/tdsmith/received_events","type":"User","site_admin":false},"created_at":"2015-07-31T04:01:50Z","updated_at":"2015-07-31T04:01:50Z","body":"I think this is a suricata usage question that isn't specific to Homebrew so you might want to seek out suricata support fora. You can probably make /dev/bpf0 owned by the admin group and assign group read permissions. Let us know if we can help with anything else."}}