Install Wireshark on MacOS X via brew

I found that I asked wrong question! Wireshark is gui that use tshark or ... at the back and when I install with brew, it install tshark and ... So that is reasonable that I could not found wireshark in terminal but I could find tshark!

I don't think the command brew install wireshark --with-qt works anymore as of July 2019 on my laptop running macOS Mojave. So my approach to install Wireshark using Homebrew is to follow the below steps:

1. Update Homebrew: `brew update'
2. Tap the Caskroom/Cask GitHub repository using HTTPS: brew tap caskroom/cask
3. Search all known casks for wireshark: brew search wireshark
4. Find out info about the wireshark cask (to be sure): brew info --cask wireshark
5. Install the wireshark cask: brew install --cask wireshark
6. Clean up (just in case): brew cleanup

If all goes well, one should see 🍺 wireshark was successfully installed! after Step 5.

I suggest using cask to create the .app binary in your /Applications folder (use reinstall if already installed):

brew install --cask wireshark

The advantage of this approach over brew install wireshark --with-qt is that more features are enabled without spending a lot of time compiling.

This is also the recommended approach for graphical applications and will use the official, feature-complete builds as distributed by the Wireshark developers.

The homebrew package wireshark installs the command line util tshark. If you want to enable the GUI, then install wireshark like this:

brew install wireshark --with-qt

If you already have Wireshark installed, do

brew reinstall wireshark --with-qt