wireshark worked before I upgrade macos to 10.15.2.

after upgrade, wireshark can't detect interfaces. It only show four external capture: ciscodump randpkt sshdump udpdump

I have done all bpf things:

crw-rw----   1 root   access_bpf      23,  24 Dec 17 16:50 bpf24
crw-rw----   1 root   access_bpf      23, 240 Dec 17 16:50 bpf240
crw-rw----   1 root   access_bpf      23, 241 Dec 17 16:50 bpf241

output of id: (Derek is in the access_bpf group)
uid=501(Derek) gid=20(staff) groups=20(staff),502(access_bpf),12(everyone),61(localaccounts),80(admin),33(_appstore),98(_lpadmin),100(_lpoperator),204(_developer),250(_analyticsusers),395(com.apple.access_ftp),398(com.apple.access_screensharing),399(com.apple.access_ssh),400(com.apple.access_remote_ae)

I have installed 3.00, 3.07 and 3.20-beta, and I have rebooted multiple time.

I tried to start wireshark in sudo.

I have looked into console for wireshark logs, nothing useful:

default 17:06:24.150330+0800    runningboardd   Acquiring assertion targeting executable<Wireshark(501)> from originator [daemon<com.apple.coreservices.launchservicesd>:156] with description <RBSAssertionDescriptor; frontmost:1768; ID: 290-156-195; target: 1768> attributes = {
    <RBSDomainAttribute: 0x7f84c642ad30; domain: com.apple.launchservicesd; name: RoleUserInteractiveFocal; sourceEnvironment: 0x0>;
}
default 17:06:24.150593+0800    runningboardd   Assertion 290-156-195 (target:executable<Wireshark(501)>) will be created as active
default 17:06:24.154681+0800    runningboardd   Finished acquiring assertion 290-156-195 (target:executable<Wireshark(501)>)
default 17:06:24.154831+0800    runningboardd   [executable<Wireshark(501)>:1768] Ignoring jetsam update because this process is not memory-managed
default 17:06:24.155090+0800    runningboardd   [executable<Wireshark(501)>:1768] Set darwin role to: UserInteractiveFocal
default 17:06:24.155355+0800    runningboardd   [executable<Wireshark(501)>:1768] Ignoring GPU update because this process is not GPU managed
default 17:06:27.619652+0800    runningboardd   Invalidating assertion 290-156-195 (target:executable<Wireshark(501)>) from originator 156
default 17:06:27.734235+0800    runningboardd   [executable<Wireshark(501)>:1768] Ignoring jetsam update because this process is not memory-managed
default 17:06:27.734450+0800    runningboardd   [executable<Wireshark(501)>:1768] Set darwin role to: UserInteractiveNonFocal
default 17:06:27.734716+0800    runningboardd   [executable<Wireshark(501)>:1768] Ignoring GPU update because this process is not GPU managed

Any other ways except REINSTALL MACOS?

BTW: tcpdump from terminal works.