Uninstalling Wireshark on a Mac

edit

I've been trying to remove my 'customizations' from the program, and uninstalling seemed to be the most effective option

Not necessarily.

If you customizations are just changes made in, for example, Wireshark > Preferences, those changes will, on UN*Xes (including macOS), be in ~/.config/wireshark, as Jaap said. Dragging the Wireshark app to the trash will not remove those, and the Read me first.html instructions won't remove them, either. What you should do in that case is, as per Jaap's answer, should be to remove that directory. (Quit Wireshark first before doing that.)

That can be done in a Terminal window by doing rm -rf ~/.config/wireshark; doing it from the Finder is a bit more work - you'd have to open a Finder window, point it to your home directory (that should appear in the sidebar on the left, with an icon of a house and your login name next to it), click Command-Shift-. (that's the Command key, the Shift key, and the "greater than/period" key). There should be a ".config" folder (somewhat faded out, to indicate that it's a normally-hidden file/folder) near the top; double-click it. There should be a "wireshark" folder (no, not capital-W); just drag that to the Trash. Then click Command-Shift-. again (unless you want to continue to see hidden files and folders in the Finder). You'll be able to start up Wireshark again after that; it should start up without your customizations.

If those aren't all of your customizations - for example, if you modified files in /Applications/Wireshark or added files under /Applications/Wireshark - then removing Wireshark would remove those customizations (but not the preference customizations).

The instructions for uninstalling can be found in the Read me first.html file found within the Wireshark installation package. Here is the text of the relevant section of that document from the installer package for version 4.0.5:

Uninstalling

To uninstall Wireshark, do the following:

1. Remove /Applications/Wireshark.app

2. Remove /Library/Application Support/Wireshark

You can uninstall ChmodBPF via the Uninstall ChmodBPF package, which is available on this disk or via Wireshark › About Wireshark › Folders › macOS Extras. You can also uninstall it manually by doing the following:

1. Unload the “org.wireshark.ChmodBPF.plist” launchd job

2. Remove /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist

3. Remove the “access_bpf” group.

You can uninstall the system path components via the Remove Wireshark from the system path package, which is available on this disk or via Wireshark › About Wireshark › Folders › macOS Extras. You can also uninstall it manually by doing the following:

1. Remove /etc/paths.d/Wireshark

2. Remove /etc/manpaths.d/Wireshark

Go check out the About Wireshark dialog. It has a Folders tab which shows where Wireshark gets its configuration from. Your personal configuration is found in ~/.config/wireshark.