Open AppleScript: By pressing cmd+space and write AppleScript Editor in the Spotlight Search as picture below: If you want to open WireShark always as administrator I suggest to use AppleScript:

# anybody in the access_bpf group can use programs that capture # the access_bpf group, with permissions rw-rw-, so that # pre-create a number of BPF devices, then make them owned by # devices on macOS are also non-cloning, that is they can # to create BPF devices with particular owners or groups. # one, not the current one, so there's no way to configure it That's all, because (as the script explains): # Unfortunately, macOS's devfs is based on the old FreeBSD Sudo '/Library/Application Support/Wireshark/ChmodBPF/ChmodBPF' Sudo dseditgroup -o edit -a `whoami` -t user access_bpf Wireshark provides the solution itself, along with the explanation of weird secrets:Īdd your user to the group 'access_bpf' by commanding I don't know how to solve this problem, but if you want a temporary fix, you can use the following command: $ sudo /Applications/Wireshark.app/Contents/MacOS/Wireshark If you want to open WireShark always as administrator then take a look to another post which I created a shortcut for it via Applescript, and this is the only way which you can open the WireShark always as administrator even when you turn off/on your mac. If your WireShark is open then close it and open it again.Īll credits of this tutorial goes to user gmale on , So the last command fixed my problem as you see in the last image: For some reason, the last one didn't get assigned properly so I had to run the command: sudo chown AliGht:admin bpf4 The last command will display a list of files such as:ĥ- Make sure all of them have your user name and admin as the user/group. To see your exact user name (for me that was AliGht)ģ- execute the following commands: cd /devĤ- now type this command: ls -la | grep bp

According to User: gmale's answer on, he solved his problem in this way and I'm sure that it could solve yours as well.

Set permissions for wireshark mac