Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] MacOSX installation and /dev/bpf permissions

From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Sat, 12 Feb 2011 23:48:41 -0700
On Sat, Feb 12, 2011 at 08:43:31AM -0700, Ed Young wrote:

> Can I execute chmod to change the /dev/bpf* permissions?

Yes.

> If so, what should they be? 755?

You need to be able to read from the bpf device, so either change the 
owner to be your username or group to be a group that you're in and give 
read permission to that.  I've always preferred the letter syntax: chmod 
u+r /dev/bpf* gives user read permission without changing the other 
permissions (that's chmod 400 /dev/bpf* for an absolute user read only / 
no access for others for the octally inclined).