No Interfaces Available In Wireshark Mac OS X

最新推荐文章于 2022-07-11 07:37:00 发布

diyago

最新推荐文章于 2022-07-11 07:37:00 发布

阅读量1.6k

点赞数

分类专栏：技术文档 Mac系统知识文章标签： os permissions security filter session interface

本文链接：https://blog.csdn.net/diyagoanyhacker/article/details/6533920

版权

技术文档同时被 2 个专栏收录

203 篇文章 0 订阅

订阅专栏

Mac系统知识

7 篇文章 0 订阅

订阅专栏

No Interfaces Available In Wireshark Mac OS X

No Interfaces Available In Wireshark Mac OS X
Many new Wireshark users on Mac OS X run into an issue where no interfaces show up when trying to begin packet capture. If you attempt to manually input an interface (such as en0) this error will occur:

The capture session could not be initiated ((no devices found) /dev/bpf0: Permission denied).

To have the interfaces show up properly you’ll need to widen the permissions on the Berkeley packet filter (BPF). By default they look like this:

crw------- 1 root wheel 23, 0 Jan 31 13:47 /dev/bpf0

复制代码

We need the filter to be readable by non-root, so open Terminal.app and run this command:

sudo chmod 644 /dev/bpf*

复制代码

Unfortunately every time you reboot this will reset, but if you are a frequent user of Wireshark you can add the ChmodBPF StartupItem to alter them automatically (available in the Utilities folder on the Wireshark disk image). To install you’ll need to follow two steps.

First, drag the ChmodBPF folder to the StartupItems alias in the same folder (or drag it to /Library/StartupItems directly). Type your password to authenticate and move the folder into the correct location.

The second requirement is only for 10.6+ users. Starting with Snow Leopard the security permissions of StartupItems are being enforced. Scripts that do not have the proper owner and group will receive this error:

Insecure Startup Item disabled. – “/Library/StartupItems/ChmodBPF” has not been started because it does not have the proper security settings

The proper security settings are ownership of the scripts by root and group of wheel.1 To set them:

sudo chown -R root:wheel ChmodBPF

复制代码

The correct settings for startup items can be found in this Apple KB article ↩
from：http://langui.sh/2010/01/31/no-i ... wireshark-mac-os-x/

求解ChmodBPF是什么东西？英文能力有限，大概理解就是capture session所需要的/dev/bpf＊没有权限，需要赋予权限，但是从启后还从新需要直接赋予权限的命令，那问提到/Library/StartupItems/这里，应该类似win下的启动菜单，但是文中ChmodBPF是何物？是自写的一个处理这个问题的shell脚本还是？那位童鞋了解过谢谢了：）