Hi all, I've tried changing permissions but I don't think that's the problem I have. I'm quite new to WireShark and am very much stumped by this. When I install WireShark and load it up, I see the following capture options: awdl0, thunderbolt bridge: bridge0, utun0, p2p0 and lookback io0. Basically, no en0. Yet when I go to capture>options>manage interfaces, I can see en0 and others, yet it won't let me tick the box which says show. Any advance would be appreciated. So pictures are here;
I am unable to tick the box in for en0 in 3) asked 03 Jan '16, 04:36  Blake edited 06 Jan '16, 08:17  grahamb ♦ showing 5 of 8 show 3 more comments |
One Answer:
It is the same like my system. You have to do the following steps:
Remark: As I can see in your screenshots the interface answered 06 Jan '16, 09:18  Christian_R Also in the remarks: I am unable to tick the box in for en0 in 3) (06 Jan '16, 09:24) grahamb ♦ @Grahamb: I had the same feeling while I have tested it. (06 Jan '16, 09:44) Christian_R |
Is that on the main screen, or on the Capture->Options list, or both?
Both, but if I go into capture>options>manage interfaces, I can see en0.
Do either of the two lists of interfaces allow you to scroll them? If so, and you scroll them to find the end of the list, is en0 at the end of the list?
Could you paste a screenshot of that?
Sure. Uploaded pictures in my original post. Many thanks for any help here.
To Guy Harris: Scrolling doesn't help as my list of interfaces isn't that large. I've uploaded some pictures to make it clearer.
What do the commands
ifconfig -aandtcpdump -Dprint?Are you able to capture in command line? Is "en0" listed in the command "/Applications/Wireshark\ 2.0.1rc0.app/Contents/MacOS/tshark -D"? Can you show us the result of: ls -als /dev/bpf0 ls -als /dev/bpf1 ls -als /dev/bpf2 ls -als /dev/bpf3