[Mac] How to Use Wireshark in Mac OS X and how to solve the NIC Problem

1. Wireshark depends on X11;

2. Mac OS X is not installed with X11 by default;

Therefore, to install Wireshark on Mac, first find out how to install X11 on the Mac OS installation DVD.

After installation, Echo $ display to see if the following results are displayed.

0.0

If not, execute the following command line:

Display =: 0.0; export display

In addition, due to Mac OS bug, each time after the system is restarted, you need to run these two commands to find the network adapter by Wireshark:

Sudo chgrp admin/dev/BPF *

Sudo chmod g + RW/dev/BPF *

Another method that may fail is to copy the chmodbpf folder in the wireshark Installation File to/library/startupitems/. My machine always reports security settings, so it can only be manually modified at the moment; however, if you do not capture packets, you do not need to modify the BPF permission for decoding;

Wireshark startup troubleshooting:

Execute Wireshark under/application/Wireshark. APP/contents/MACOs to view the result and process it as prompted;