Page 1 of 1

Wireshark MacOS Integration

Posted: Tue Mar 28, 2017 7:13 pm
by 2600
Is there a way to effectively integrate wireshark on a Mac? I don't see anything in the HowTo section.

Thanks in advance.

Re: Wireshark MacOS Integration

Posted: Tue Mar 28, 2017 7:35 pm
by ramindia
2600 wrote:
Tue Mar 28, 2017 7:13 pm
Is there a way to effectively integrate wireshark on a Mac? I don't see anything in the HowTo section.

Thanks in advance.
I have not tried myself, but known person using, here is the youtube video for your reference.

https://www.youtube.com/watch?v=JRk9ZsgNwr4

R!

Re: Wireshark MacOS Integration

Posted: Sat Apr 01, 2017 5:00 pm
by 2600
That doesn't work now in EVE-NG. I am not an expert in Applescript, but for me, this fails to launch Wireshark, though it does run a tcpdump. This method DID work with the old Unetlab.

Re: Wireshark MacOS Integration

Posted: Sat Apr 01, 2017 5:39 pm
by mike

Re: Wireshark MacOS Integration

Posted: Sun Apr 02, 2017 11:56 am
by 2600
I don't know why it wasn't working. I just had to remove Wireshark and reinstall and all started working again.

Re: Wireshark MacOS Integration

Posted: Fri Apr 07, 2017 1:55 am
by vikingodeloxxo
Hi,

In case you want to modify your own WireShark app in the mac, I was able to make it work by doing the following:

On the Library browsed to /Applications/Wireshark.app/Contents and added the following to the Info.plist file:

Code: Select all

...
		<!-- XXX - This dictionary needs a lot more entries -->
	</array>
+	<key>CFBundleURLTypes</key>
+	<array>
+ 	<dict>
+   	<key>CFBundleURLName</key>
+    		<string>SysPref Handler</string>
+    	<key>CFBundleURLSchemes</key>
+   	<array>
+     		<string>capture</string>
+    	</array>
+ 	</dict>
+	</array>
	<key>CFBundleInfoDictionaryVersion</key>
	<string>6.0</string>
...

Re: Wireshark MacOS Integration

Posted: Fri Apr 07, 2017 1:58 am
by 2600
That is very interesting.

However, that probably needs to be re-done after each upgrade, right?