Wireshark · Wireshark-users: Re: [Wireshark-users] Unable to do live capture Mac OS X 10.6.4

[Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>]

Edwin Chu wrote:
> Hi
>
> I am using Wireshark on MAC OS X Snow Leopard 10.6.4. I have used it on 
> the same computer successfully before. This time I try to capture 
> traffic with wireshark 1.2.8. I have chmod bpf devices and Wireshark 
> could detect packets in the interface list (see attachments). However, 
> when I start the capture, wireshark only shows few packets at the moment 
> starting the capture, and then it stop capture new packets. I have tried 
> to remove the .wireshark in my home directory but can't solve the problem.

What version of libz do you have?  See this bug:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4708

If you upgrade to Wireshark 1.2.9 that particular problem should be fixed.