Open the main 'Library' folder on your hard drive - NOT the one in your home directory.Rename the Startup folder to 'ChmodBPF' instead of 'Startup'.Open the Startup folder you just copied, and delete 'README.macosx'.Drag the 'Startup' folder to the Desktop. On the disk image, open the Utilities folder.Drag the Wireshark app to your Applications folder. If you are on an Intel Mac, keep reading, there are several more steps. If you are on a PowerPC Mac, launch the 'Wireshark 0.99.5c (ppc).mpkg' installer package and follow the prompts then you're done with installation. Note: It is critical that you install the correct version for your architecture - there were major changes in the handling of permissions with regard to setting the network interface to promiscuous mode. There's more to it than just the standalone app.)

If it's not there, you will need to install X11 from your original OS X system discs. (If you're not sure you have X11, go into the Applications folder, then into Utilities, and look for the 'X11' application. Note: You need to be root or an administrator to do this, and you MUST have Apple's 'X11' framework installed. This is a crash course on getting WireShark (formerly known as Ethereal a powerful graphical front end to tcpdump) installed and running on your Mac, and how to do a few basic analyses of network traffic data. How to Install and Use WireShark on Mac OS X How to Install and Use WireShark on Mac OS X

Wireshark mac install