In order to collect statistics, tcpstat must be run as a user with root privledges or be installed suid root. The Debian package of tcpstat is /not/ installed suid root; attempts to run it as a non-root user will result in this error message: pcap_open(): socket: Operation not permitted If you need to allow non-root users to run tcpstat, please investigate the "sudo" package.