Thursday, February 10, 2011

getting wireshark to work on a mac

Wireshark needs your account to have readable access to BPF devices. You can run the following to get this to work:


$ sudo chown {username} /dev/bpf*


without this hack, you will get "no interfaces" to capture on. You need to run this command after every reboot, unless you want to add it to a startup script.

No comments:

Post a Comment