Should we guess there that CIA find a way to do stuff when wireshark is run as root? This post title is very confusing.