case "${ACTION}" in
post)
	chgrp wireshark usr/bin/dumpcap
	setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' usr/bin/dumpcap
	;;
esac
