Anybody in that group will be able to sniff without being root. That's what we're aiming for, so select Yes and hit return. This will ask you if you want to allow non-root user to be able to sniff. In a terminal (very important that you're in a terminal, not just the Alt+F2 dialogue) run this: sudo dpkg-reconfigure wireshark-common The bit that normally needs root is the packet collection application and this can be configured to allow certain people to use it without sudo, gksu, etc. Remove Wireshark from the system path.For WireShark there's a better way. Open the package and drag the Wireshark app to the Applications folder to install it.Download the latest Wireshark version from.Close the Wireshark app and windows and drag the app from the Applications folder to the trash to uninstall it.Remove Wireshark from the system path.pkg installer files to remove these Wireshark dependencies Go to Folders and double-click on the macOS Extras blue text link to open a directory in Finder with a few PKG files.In the top Menu Bar, click on Wireshark > About Wireshark.Sudo launchctl load '/Library/LaunchDaemons/' WARNING: This solution will not persist after a reboot.

Run the below commands and then restart the Wireshark app. You can look at the active discussion thread about it here: The issue appears to be with MacOS recognizing the digital signature on the file /Library/Application Support/Wireshark/ChmodBPF/ChmodBPF. If you try to capture on an interface, you will see “ The capture session could not be initiated on capture device…” If you open Wireshark, you will likey see the message “ You don’t have permission to capture on local interfaces” and “ You can fix this by installing ChmodBPF“.Įven after installing this package, restarting Wireshark, and even rebooting your machine, you will continue to see this message when you run Wireshark. pkg If you recently updated your Mac to Ventura 13.1 or 13.2, and you had installed Wireshark previously, then you may be having some trouble.

Sudo wireshark