Before You Begin

This release of Wireshark requires Macintosh OS X 10.5.5 or later, including X11.app. If you are running OS X 10.5.4 or older, you can install using MacPorts or Fink.

Quick Setup

Simply double-click the Wireshark package. For details about the installation read below.

What changes does the installer make?

The installer writes to the following locations:

	•	/Applications/Wireshark. The main Wireshark application.
	•	/Library/StartupItems/ChmodBPF. A script which adjusts permissions on the system's packet capture devices (/dev/bpf*) when the system starts up.
	•	/Library/Wireshark. A wrapper script and symbolic links which will let you run Wireshark and its associated utilities from the command line. You can access them directly or by adding /Library/Wireshark to your PATH.

Additionally a group named access_bpf is created. The user who opened the package is added to the group.

How do I uninstall?

	1.	Remove /Applications/Wireshark
	2.	Remove /Library/Wireshark
	3.	Remove /Library/StartupItems/ChmodBPF
	4.	Remove the access_bpf group.