diff --git a/wireshark.spec b/wireshark.spec
index f916b0932fd56df9d494e0a0475b61c361c5e031..cb0f79c3c7d4e32dfd6b7dcac73be44a018f9cc5 100644
--- a/wireshark.spec
+++ b/wireshark.spec
@@ -5,7 +5,7 @@
 Summary:	Network traffic analyzer
 Name:		wireshark
 Version:	3.6.0
-Release:	2
+Release:	3
 Epoch:		1
 License:	GPL+
 Url:		http://www.wireshark.org/
@@ -145,6 +145,9 @@ install -Dpm 644 %{SOURCE3}		%{buildroot}%{_sysusersdir}/%{name}.conf
 touch %{buildroot}%{_bindir}/%{name}
 find %{buildroot} -type f -name "*.la" -delete
 
+%pre
+getent group wireshark >/dev/null || groupadd -r wireshark
+exit 0
 #%post
 #%{?ldconfig}
 #if [ -S /run/udev/control ]; then
@@ -192,6 +195,9 @@ find %{buildroot} -type f -name "*.la" -delete
 %{_mandir}/man?/*
 
 %changelog
+* Tue Feb 15 2022 xu_ping <xuping33n@huawei.com> - 3.6.0-3
+- fix install warning group wireshark does not exist -using root
+
 * Wed Jan 19 2022 Chen Chen <chen_aka_jan@163.com> - 3.6.0-2
 - fix update error for add wireshark-cli Provides&Obsoletes