Can no longer capture traffic on M1

asked 2022-03-16 13:31:30 +0000

Erik
1 ●1 ●1 ●1

I have been using wireshark without problems on my macbook M1, but somehow I did something that made wireshark suddenly stop capturing any traffic. I don't remember what I did but there I was capturing traffic one minute, then trying out some options, and after that I never got Wireshark to show any packets any more. So this happened all in one sitting: from capturing to no longer capturing. Not even a reboot in between.

Since then (this happened a couple of weeks ago), I tried complete uninstall and reinstall (including CHModBPF uninstall/install) twice, but still no packets. In my start screen I see the traffic graph for my wifi interface, but whatever I try; no packets. TCPDump captures traffic OK. And I can read pcap files with wireshark without problems.

Any help appreciated

edit retag flag offensive close merge delete

add a comment

2 Answers

Sort by » oldest newest most voted

answered 2024-12-09 20:28:39 +0000

juniore
1 ●1

I just found a solution, running Sequoia on M1. In order to see packets, you have to disable Monitor mode. I you want to use Monitor mode, for example to see 802.11 packets, yo need first to disconnect from any Wifi Network, then you start seing the packets.