 | 1 | initial version |
Watching a course done on Windows and noticing that MacOS has some different features than Windows.
Yes, capture capabilities are platform-dependent, as different UN*Xes provide different mechanisms, and Windows requires add-on mechanisms that we get from various third parties.
The front page of the Wireshark Wiki has, in the Prepare Wireshark / TShark section, a link to the Capture Setup page.
That page has, in the See Also section, a set of links to pages about setting up capturing for particular media. One of them is the Capturing USB Traffic page, which has a section on macOS giving details.
And, yes, in Catalina and later, you really do have to turn off System Integrity Protection to see the USB capture devices. That's not our fault, it's Apple's fault, so, to get it fixed, you'll have to complain to Apple and convince them to remove that restriction - which wasn't there in previous releases.
