is it possible to download Wireshark on a MacBook M1, or parallels windows ARM64? If so please share how to do this.

asked 2021-06-25 08:36:36 +0000

richie
1 ●1 ●1 ●1

edit retag flag offensive close merge delete

add a comment

3 Answers

Sort by » oldest newest most voted

answered 2021-06-25 09:07:02 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●973 ●227 https://www.wireshark.org

The standard x64 macOS build should run using the Rosetta 2 technology from Apple to run code compiled for Intel.

I have no idea if it allows capture though.

The Wireshark build chain is being adapted to build for M1, but there's no timeframe for it being ready.

edit flag offensive delete link

add a comment

answered 2021-06-25 14:13:22 +0000

Bob Jones
1496 ●2 ●179 ●22 Boston, MA

Brand new M1 Macbook Air with current Wireshark - monitor mode capture with 11ax seems to work OK:

image description

edit flag offensive delete link

Comments

Thanks everyone from the answers I have now got Wireshark working with the MacOS intel 64bit download!

richie ( 2021-06-28 14:33:05 +0000 )edit

Hi Bob, Network traffic works, but I would like to grab USB. I try "sudo ifconfig XHC20 up" in terminal. there is no HXC20 interface.

Do you have any idea or suggestion?

davidtsai ( 2021-10-21 01:31:00 +0000 )edit

Sorry, I never worked through USB capture on a Mac. I would start a new question as other Mac users may have worked that problem.

Bob Jones ( 2021-10-21 14:05:08 +0000 )edit

Hi Bob,

It worked. there are XHC0/HXC1 interface on my Macbook Air M1(2020), OS :11.6 Just enable them and select on WireShark, it could capture USB packages.

But, I could not find any XHCI interface on Macbook Pro(M1,2020).Even it use same USB control chip "AppleT8103USBXHCI", its OS is 11.5

Any idea about that? Sorry ,it should be OS issue not wireshark's.

davidtsai ( 2021-10-25 03:39:55 +0000 )edit

add a comment

answered 2021-06-25 08:54:56 +0000

hugo.vanderkooij
76 ●190 ●4

I would guess you need to compile it yourself. You can find the source code on gitlab : https://gitlab.com/wireshark/wireshark/

edit flag offensive delete link

Comments

If you want a native ARM64 build, you will currently need to compile it yourself.

However, if you want to run, on an ARM64 Mac under macOS, an x86-64 build under Rosetta 2, that appears to Just Work.

There is no equivalent for running on an ARM64 Windows machine, except perhaps running an IA-32 (32-bit x86) build using Microsoft's binary translator.

Guy Harris ( 2021-06-25 19:36:51 +0000 )edit

add a comment