Question

At my company, some commands are allowed to run with sudo, such as tcpdump. Others not.

I expect run tcpdump for a while, and then stop it.
When I run tcpdump, and I could abort that with Ctrl+C

I wrote a shell script like this –

#!/bin/sh
sudo tcpdump -ieth1 -w ~/dump.bin
sleep 5
kill -2 $!

it doesn’t really work. The process of tcpdump is run as root, and current user is a normal account.

My question is: is there any way to do the equivalent of ctrl c in bash script?.

EDIT:

ps:As my company’s security policy, I cannot run kill as root.

Answer 1

Try the -Z option to tcpdump. It instructs tcpdump to drop root privileges and run as the user specified in the argument.

sudo tcpdump -Z $USER -ieth1 -w ~/dump.bin

Now try killing that process.