Wireshark Capture support

[Jasper Frumau]

On Tue, Sep 14, 2010 at 6:51 PM, Jeff Singleton <gvibe06 at gmail.com> wrote:

> Actually ... that will work! Its the ChmodBPF steps to change the
> permissions so that the 'admin' group can access the devices.
>

I looked for bpf  as indicated at
http://wiki.wireshark.org/CaptureSetup/CapturePrivileges for BSD/OSX

jaspersmbp:dev jasper$ ls -l | grep bpf
crw-------  1 root    wheel      23,   0 Sep 15 11:13 bpf0
crw-------  1 root    wheel      23,   1 Sep 15 11:01 bpf1
crw-------  1 root    wheel      23,   2 Sep 15 11:01 bpf2
crw-------  1 root    wheel      23,   3 Sep 15 11:01 bpf3

Is this the correct folder? wil chmod 666 do?



> On Tue, Sep 14, 2010 at 10:36 AM, Rainer Müller <raimue at macports.org>wrote:
>
>> On 2010-09-14 12:40 , Jasper Frumau wrote:
>> > Installed Wireshark a while. Decided to use it for some network analysis
>> > today, using it for the first time ever. Got an error "There are no
>> > interfaces on which a capture can be done". I believ I need teh capture
>> > support driver like wincap for Windows. Which one can I install using
>> > MacPorts? I searched for packet socket, but nothing. Then I read
>> > "BSD (including Mac OS X)
>> > On various BSDs, you need to have BPF support enabled in your kernel. In
>> > Mac OS X, and in newer versions of at least some free-software BSDs,
>> > it's enabled by default. In other BSDs, see the documentation for your
>> > system for information on how to enable BPF support.  "
>>
>> You need to run wireshark with extended privileges in order to be able
>> to read "raw" from the capture interface. /dev/bpf* is only accessible
>> for root by default. Run 'sudo wireshark'.
>>
>> I don't know if modifying the permissions on those files would help as
>> described on the wireshark wiki here:
>> <http://wiki.wireshark.org/CaptureSetup/CapturePrivileges> (BSD section)
>>
>> HTH,
>> Rainer
>> _______________________________________________
>> macports-users mailing list
>> macports-users at lists.macosforge.org
>> http://lists.macosforge.org/mailman/listinfo.cgi/macports-users
>>
>
> Your HTML signature here
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/macports-users/attachments/20100915/ce2f8c0b/attachment.html>