wireshark not able to run by default despite it being installed on macOS about ksniff HOT 4 CLOSED

[EDIT] Have now submitted the change upstream @ Homebrew/homebrew-cask#84455. Once it's merged, it should just be a matter of upgrading to the latest version, but if you can't wait, the manual steps in my previous edit below will still work.

My brew PR was rejected because there is no official upstream recommendation to do it the way I proposed, so the steps below will have to suffice.

Got it working with Wireshark 3.x as follows:

$ brew uninstall wireshark
$ brew cask uninstall wireshark
$ rm -f /usr/local/bin/wireshark

$ brew cask install wireshark

$ echo '#!/bin/sh

exec /Applications/Wireshark.app/Contents/MacOS/Wireshark "$@"' > /usr/local/bin/wireshark

$ chmod +x /usr/local/bin/wireshark

from ksniff.

Another OSX user here, I could not make ksniff work with Wireshark 3.x, neither manual install nor homebrew packages and casks.

However, the solution for me was to use the latest 2.x release:

• Select your closest mirror from the list https://www.wireshark.org/download.html#spelunking
• Search for the latest 2.x version
• e.g. in Europe, I used https://1.eu.dl.wireshark.org/osx/Wireshark%202.6.15%20Intel%2064.dmg
• mount the dmg
• execute the included installer
• done, no reboot required

from ksniff.

I had this issue when using wireshark installed by homebrew.
I ended up downloading the DMG from wireshark directly, and found that when I opened the DMG it had a file "Add Wireshark to the system path" along with "Install Chmod BPF".
I installed those, restarted my computer and got passed that error.

from ksniff.

Thanks @hendrikmaus. That worked for me as well just as you described.

from ksniff.