cuckoo pcap and pcap_sorted capture nothing of interest. :(

[b1g334]

Hello,

I have Cuckoo setup and up and running (i think) and I can invoke a vbox image, and perform --URL and analyze a test url... In this case i'm just feeding a test url, http://www.cnn.com.

My problem is that the PCAP files in /storage/analysis/9/dump.pcap do not contain any references to the subject website.

I'm sure I've mucked up somewhere obvious. The "sort_pcap = on" value in cuckoo.conf doesn't actually produce a sorted PCAP!

I'm on a ubuntu14.04LTS box, I have entered the command to allow tcpdump to run as a non root account as well.

sudo chmod +s /usr/sbin/tcpdump
sudo apt-get install libcap2-bin
sudo setcap cap_net_raw,cap_net_admin=eip /usr/sbin/tcpdump

I can successfully launch the URL analysis, on windows 7, the agent spawns an ie8 instance and browses to the website. Everything looks normal, just sparse to empty PCAP files.