THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

is it possible to download Wireshark on a MacBook M1, or parallels windows ARM64? If so please share how to do this.

  • retag add tags

is it possible to download Wireshark on a MacBook M1, or parallels windows ARM64? If so please share how to do this.

richie's avatar
1
richie
asked 2021-06-25 08:36:36 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

3 Answers

1

Brand new M1 Macbook Air with current Wireshark - monitor mode capture with 11ax seems to work OK:

image description

Bob Jones's avatar
1.5k
Bob Jones
answered 2021-06-25 14:13:22 +0000
edit flag offensive 0 remove flag delete link

Comments

Thanks everyone from the answers I have now got Wireshark working with the MacOS intel 64bit download!

richie's avatar richie (2021-06-28 14:33:05 +0000) edit

Hi Bob, Network traffic works, but I would like to grab USB. I try "sudo ifconfig XHC20 up" in terminal. there is no HXC20 interface.

Do you have any idea or suggestion?

davidtsai's avatar davidtsai (2021-10-21 01:31:00 +0000) edit

Sorry, I never worked through USB capture on a Mac. I would start a new question as other Mac users may have worked that problem.

Bob Jones's avatar Bob Jones (2021-10-21 14:05:08 +0000) edit

Hi Bob,

It worked. there are XHC0/HXC1 interface on my Macbook Air M1(2020), OS :11.6 Just enable them and select on WireShark, it could capture USB packages.

But, I could not find any XHCI interface on Macbook Pro(M1,2020).Even it use same USB control chip "AppleT8103USBXHCI", its OS is 11.5

Any idea about that? Sorry ,it should be OS issue not wireshark's.

davidtsai's avatar davidtsai (2021-10-25 03:39:55 +0000) edit
add a comment see more comments
1

The standard x64 macOS build should run using the Rosetta 2 technology from Apple to run code compiled for Intel.

I have no idea if it allows capture though.

The Wireshark build chain is being adapted to build for M1, but there's no timeframe for it being ready.

grahamb's avatar
23.8k
grahamb
answered 2021-06-25 09:07:02 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments
0

I would guess you need to compile it yourself. You can find the source code on gitlab : https://gitlab.com/wireshark/wireshark/

hugo.vanderkooij's avatar
76
hugo.vanderkooij
answered 2021-06-25 08:54:56 +0000
edit flag offensive 0 remove flag delete link

Comments

If you want a native ARM64 build, you will currently need to compile it yourself.

However, if you want to run, on an ARM64 Mac under macOS, an x86-64 build under Rosetta 2, that appears to Just Work.

There is no equivalent for running on an ARM64 Windows machine, except perhaps running an IA-32 (32-bit x86) build using Microsoft's binary translator.

Guy Harris's avatar Guy Harris (2021-06-25 19:36:51 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer