Revision history [back]

I figured out a funny 'hack' or workaround that works on MacOS 15.0 (I believe it is developer beta), so you can have live capture even after turning off the sniffer in wireless diagnostics

1. CMD + SPACE and type "Wireless Diagnostics" ...
2. Go to the upper menu bar and click Window
3. In the Window menu, click on Sniffer
4. Select any random thing and start sniffing packets
5. Open Wireshark (I ran it as sudo /Applications/Wireshark.app/Contents/MacOS/Wireshark (not sure if you need this or not)
6. Set your en0 to monitor
7. You should start seeing packets

You can then stop the Sniffer and you will still be able to see live capture in Wireshark, note: this will obviously turn off your managed wifi connection.

Rinse and repeat anytime you need to see live capture ...

GLHF