Comment 10 for bug 513903

If you're going to create a group for this, give it a neutral name rather than a Wireshark-specific name; this doesn't just apply to Wireshark, it applies to any other program that either directly opens PF_PACKET/SOCK_RAW sockets or that calls libpcap to do so, e.g. tcpdump.

On OS X, the Wireshark installation package creates an "access_bpf" group; as Linux doesn't use /dev/bpf* devices, that name wouldn't make sense, but a similar name might make sense.