Tuesday, December 7, 2010

Beating wireshark into shape on OSX

I've gotten emails from several past students regarding wireshark operations on OSX. Similar to the experiences in the classroom, when installing Wireshark into OSX you must also FOLLOW ALL OF THE DIRECTIONS ;).

If you are experiencing the following error:
“Insecure Startup Item disabled. – “/Library/StartupItems/ChmodBPF” has not been started because it does not have the proper security settings.

Pretty simple fix, just change the ownership of the ChmodBPF script to that of root in the wheel group.

To accomplish this:
cd /Library/StartupItems
sudo chown -R root:wheel ChmodBPF

1 comment:

  1. Although it's an old version, I'm a fan of the one found here: http://www.christian-hornung.de/

    Doesn't need X11, or really any kind of tweaking.

    One day I'll have to figure out how its built, and update it.

    ReplyDelete