[cyphar]

setcap is in principle better than setuid if your program is something like ping. Or in this case, wireshark.