[ikavalio]

Hi!

I've noticed a tiny change in packetflix siemens/packetflix@e0e980e (updated README section) that made CAP_DAC_READ_SEARCH capability mandatory about a week ago. This PR updates the command to include a missing capability.

I did a few tests locally (containerlab + podman) to ensure it works as expected:

# using 'basic/5-redistribute' lab as an example with
# tools:
#  edgeshark:

> netlab up

... snip ...

[SUCCESS] edgeshark tool started
Open http://127.0.0.1:5001 in your browser

> sudo podman logs -f edgeshark
{
  "msg": "exec container process `/packetflix`: Operation not permitted",
  "level": "error",
  "time": "2026-11-06T10:05:16.971909Z"
}

# Now if I customize the tools command to include '--cap-add DAC_READ_SEARCH'

> sudo podman logs -f edgeshark
time=2026-11-06T10:07:25.474Z level=INFO msg="Packetflix Capture-as-a-Service" version=1.0.0
time=2026-11-06T10:07:25.474Z level=INFO msg="starting capture service websocket server" addr=[::]:5001

[ipspace]

Thanks a million and welcome to the contributors club!