Wireshark-dev: [Wireshark-dev] WireShark on MAC OS X Leopard 10.5.7
From: Ed Wagner <ed.j.wagner@xxxxxxxxx>
Date: Wed, 1 Jul 2009 21:01:49 -1000
Aloha,

I tried Wireshark on my home Apple Intel IMAC using Leopard 10.5.7 and found that I could not capture anything as an administrator. The interfaces did not show up, and I saw an error stating that permission on /dev/bpf0 was denied. Apparently this program must be run as root because the permissions on thios file are crw------- root wheel. However, MAC OS X does not have a RunAs command like Windows does so I found a program called Pseudo that enables me to run WireShark as root just like Windows admins, and now the interfaces show up and I can capture packets.

Best Regards,

Ed Wagner
Mililani, HI