Skip to main content

All Questions

Tagged with
1 vote
0 answers
395 views

How do I capture non-local packets using WireShark on MacOS?

This is a pretty simple question. I'm trying to use WireShark to capture packets using my MacBook Pro 2019. Every time I run a capture on en0 (my Wi-Fi interface), all I am seeing is packets directed ...
Ben Zelnick's user avatar
1 vote
1 answer
344 views

Wireshark UI doesn't show captured packets but CLI does on macOS

I installed Wireshark 3.5.0 and 3.4.2 and both versions show the same behavior: tshark -i en0 is showing packets Opening the Wireshark UI, the same interface en0 is listed, and I see the traffic ...
ohboy21's user avatar
  • 233
0 votes
1 answer
127 views

How to capture API requests before they are routed through VPN?

When my computer is connected to VPN, the only traffic I see in Wireshark is the VPN ESP packets. Is it possible to capture traffic before it is routed through VPN such as API requests?
sunknudsen's user avatar
  • 1,010
0 votes
1 answer
76 views

Which application initiates network requests? Local DNS reports reqs to non-existing domains. [wireshark, macos, dns]

Summary: I see dozens of requests to non-existing domains and I suspect it slows down my network. Can't find the source. Full description: I use pihole as a DNS server, and both Wireshark and Little ...
zstolar's user avatar
  • 131
1 vote
0 answers
1k views

Why does “Add Wireshark to the system path” fail to make man work?

I used Wireshark 3.2.2 Intel 64 to install Wireshark on macOS 10.15.3. And I installed ChmodBPF and Add Wireshark to the system path. tshark work in Oh My Zsh with iTerm2: $ tshark -h TShark (...
Jingguo Yao's user avatar
0 votes
1 answer
104 views

manually set wifi card frequency on MacOS X

I'm using macOS High Sierra (10.13.6). I would like to sniff live wifi traffic on a specific wireless channel using Wireshark. I'm able to put the interface in monitor mode using Wireshark and see all ...
tano's user avatar
  • 101
0 votes
1 answer
25 views

How can specify limit for trace collection in OS X wireshark?

Wireshark noob here, trying to figure out how to set a limit for trace collection in OS X Wireshark. I did a search on the wiki page but nothing comes up in the results.
Daniel Jacobson's user avatar
0 votes
0 answers
608 views

Spying on Wi-Fi-connected device from laptop

I want to capture (and possibly modify) packets from a WiFi-connected device using my MacBook Pro and I am trying to figure out the most straightforward way of doing so. I have solved the problem (...
Krumelur's user avatar
  • 687
0 votes
0 answers
131 views

Wireshark 1.99 monitor mode?

Relatively new to Wireshark, running 1.99.7 on a MacBook Pro (2015), OS X Yosemite 10.10.3. I have no problem with basic capture via wifi, but have been unable to figure out how to turn on monitor ...
Mike's user avatar
  • 1
4 votes
1 answer
14k views

Wireshark loopback on mac os x [closed]

I have selected loopback (in capture options) to capture http traffic on my localhost server, but everytime I do and HTTP I only can see TCP.
Ricardo's user avatar
  • 141
0 votes
0 answers
133 views

HTTP Sniffing using wireshark

I am using Wireshark on my Mac, which is running Yosemite. When I am sniffing the HTTP protocol, I can only see the HTTP/get and I cannot see the HTTP/OK.. Is there a way to enable this on my MAC? I ...
Niels Robben's user avatar
0 votes
1 answer
2k views

How I can start to capture packets and saving it by command line using Wireshark

Could you tell me how I can start to capture packets with specific interface by command line and saving it by command line using Wireshark? I would like to save it on my Desktop. OS X 10.9.2 ...
Juza's user avatar
  • 1,107
0 votes
1 answer
2k views

Which Wireshark settings to see connections from phone

I am trying to find out which URLs my phone is accessing when on a local WIFI network. My trials so far have been running an Ad-hoc network on my Laptop and sharing Internet through it (this works). ...
Unapiedra's user avatar
  • 1,520
7 votes
3 answers
16k views

X11/XQuartz won't auto-launch after upgrading to OS X Mavericks?

I can't use Wireshark on latest OS X 10.9 Mavericks. Previously, I was using XQuartz to run X11 applications like Wireshark. But, yesterday, after I upgraded my iMac operating system to OS X 10.9, I ...
Yi Jiang's user avatar
  • 183
0 votes
1 answer
2k views

Firewall and Blocking [More] Traffic

I have a MacBook Pro with the firewall on. I'm trying to run a Wireshark trace and the noise bleeding through Apple's firewall is very distracting. According to the image below, most of this noise is ...
jww's user avatar
  • 12.3k

15 30 50 per page