Because you cannot run Brim with sudo privileges (and you probably ran Wireshark with sudo privileges), you’re going to need to make sure that PCAP file is owned by the same user who will run Brim.