Ask Your Question
0

is it possible to download Wireshark on a MacBook M1, or parallels windows ARM64? If so please share how to do this.

asked 2021-06-25 08:36:36 +0000

richie gravatar image

is it possible to download Wireshark on a MacBook M1, or parallels windows ARM64? If so please share how to do this.

edit retag flag offensive close merge delete

3 Answers

Sort by ยป oldest newest most voted
1

answered 2021-06-25 09:07:02 +0000

grahamb gravatar image

The standard x64 macOS build should run using the Rosetta 2 technology from Apple to run code compiled for Intel.

I have no idea if it allows capture though.

The Wireshark build chain is being adapted to build for M1, but there's no timeframe for it being ready.

edit flag offensive delete link more
1

answered 2021-06-25 14:13:22 +0000

Bob Jones gravatar image

Brand new M1 Macbook Air with current Wireshark - monitor mode capture with 11ax seems to work OK:

image description

edit flag offensive delete link more

Comments

Thanks everyone from the answers I have now got Wireshark working with the MacOS intel 64bit download!

richie gravatar imagerichie ( 2021-06-28 14:33:05 +0000 )edit

Hi Bob, Network traffic works, but I would like to grab USB. I try "sudo ifconfig XHC20 up" in terminal. there is no HXC20 interface.

Do you have any idea or suggestion?

davidtsai gravatar imagedavidtsai ( 2021-10-21 01:31:00 +0000 )edit

Sorry, I never worked through USB capture on a Mac. I would start a new question as other Mac users may have worked that problem.

Bob Jones gravatar imageBob Jones ( 2021-10-21 14:05:08 +0000 )edit

Hi Bob,

It worked. there are XHC0/HXC1 interface on my Macbook Air M1(2020), OS :11.6 Just enable them and select on WireShark, it could capture USB packages.

But, I could not find any XHCI interface on Macbook Pro(M1,2020).Even it use same USB control chip "AppleT8103USBXHCI", its OS is 11.5

Any idea about that? Sorry ,it should be OS issue not wireshark's.

davidtsai gravatar imagedavidtsai ( 2021-10-25 03:39:55 +0000 )edit
0

answered 2021-06-25 08:54:56 +0000

hugo.vanderkooij gravatar image

I would guess you need to compile it yourself. You can find the source code on gitlab : https://gitlab.com/wireshark/wireshark/

edit flag offensive delete link more

Comments

If you want a native ARM64 build, you will currently need to compile it yourself.

However, if you want to run, on an ARM64 Mac under macOS, an x86-64 build under Rosetta 2, that appears to Just Work.

There is no equivalent for running on an ARM64 Windows machine, except perhaps running an IA-32 (32-bit x86) build using Microsoft's binary translator.

Guy Harris gravatar imageGuy Harris ( 2021-06-25 19:36:51 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-06-25 08:36:36 +0000

Seen: 2,476 times

Last updated: Jun 28