Running Wireshark 1.4.3 64-bit on a MacBook Pro (model MacBookPro2,2 according to System Profiler). If I start capturing on the ethernet port, after about a second or two of capturing everything it sees, two things happen: (a) only packets generated on the computer (or targeted to the computer) get captured (b) no other process running on the computer can transmit or receive data over the network Is there a way around this? (And yes, the ChmodBPF script is in place and operating properly). John Francini asked 25 Jan '11, 12:00 francini |
Does this also happen if you capture with tcpdump? If so, it's probably a bug in OS X's BPF.
The OS version - I assume it's 10.6.6 - is probably more important than the hardware.