Ask Your Question
0

Cant capture packets on Macbook M1

asked 2023-01-08 02:30:05 +0000

NTEng gravatar image

Hey,

So I got MacBook M1 and having trouble in starting packet captures. Wireshark requires "ChmodBPF" package which I have installed but still having issues with it.

Can someone please help as without the ability of capturing packets, the tool is not much of a use :(

I am surprised that on MacBook its having issues.

edit retag flag offensive close merge delete

Comments

I am having trouble installing ChmodBPF, how do i do this exactly as the installer doesn't seem to work?

Andythetallguy gravatar imageAndythetallguy ( 2023-02-06 21:28:39 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2023-01-10 15:51:08 +0000

Are you running Ventura? This worked for me https://ask.wireshark.org/question/29...

edit flag offensive delete link more

Comments

Yes Running Venture and the solution you pasted works but once I reboot, it stops working. :(

NTEng gravatar imageNTEng ( 2023-01-10 23:12:17 +0000 )edit

ChmodBPF does a UNIX "chmod" command to change the permission bits on all the BPF devices, so that Wireshark (well, Wireshark's dumpcap program) can open them without root privileges. The /dev/bpf files are not stored on a file system that exists after a reboot - the file system is recreated from scratch after a reboot (it's the macOS devfs), so the permission changes are lost after a reboot.

This means that you need to run the ChmodBPF script after every reboot. Wireshark installs it in a fashion that should cause it to be run automatically after every reboot, but something about Ventura 13.1 is causing that not to happen. This is a known issue.

Guy Harris gravatar imageGuy Harris ( 2023-01-12 09:17:12 +0000 )edit

Thank you so much for letting me know.

Much appreciate.

NTEng gravatar imageNTEng ( 2023-01-12 09:34:43 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2023-01-08 02:30:05 +0000

Seen: 2,296 times

Last updated: Jan 08 '23