This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Mac OS X 10.6.6 - Wireshark capture starves other apps of data

0

Running Wireshark 1.4.3 64-bit on a MacBook Pro (model MacBookPro2,2 according to System Profiler). If I start capturing on the ethernet port, after about a second or two of capturing everything it sees, two things happen:

(a) only packets generated on the computer (or targeted to the computer) get captured (b) no other process running on the computer can transmit or receive data over the network

Is there a way around this? (And yes, the ChmodBPF script is in place and operating properly).

John Francini

asked 25 Jan '11, 12:00

francini's gravatar image

francini
1111
accept rate: 0%

Does this also happen if you capture with tcpdump? If so, it's probably a bug in OS X's BPF.

The OS version - I assume it's 10.6.6 - is probably more important than the hardware.

(25 Jan '11, 14:50) Guy Harris ♦♦