MacOS Please check to make sure you have sufficient permissions, and that you have the proper interface or pipe specified.

MacOS Please check to make sure you have sufficient permissions, and that you have the proper interface or pipe specified.

If you try to run the wireshark and capture on a macOS you will meet the following error message:

Please check to make sure you have sufficient permissions, and that you have the proper interface or pipe specified.

 

the fix that i found is:

Wireshark provides the solution itself, along with the explanation of weird secrets:

  1. add your user to the group “access_bpf” by commanding
    sudo dseditgroup -o edit -a `whoami` -t user access_bpf
  2. then launch Wireshark’s script
    sudo "/Library/Application Support/Wireshark/ChmodBPF/ChmodBPF";

That’s all, because (as the script explains):

# Unfortunately, macOS's devfs is based on the old FreeBSD
# one, not the current one, so there's no way to configure it
# to create BPF devices with particular owners or groups. BPF
# devices on macOS are also non-cloning, that is they can
# be created on demand at any time. This startup item will
# pre-create a number of BPF devices, then make them owned by
# the access_bpf group, with permissions rw-rw----, so that
# anybody in the access_bpf group can use programs that capture
# or send raw packets.


thank you: https://stackoverflow.com/questions/41126943/wireshark-you-dont-have-permission-to-capture-on-that-device-mac

Related Articles