wireshark VS macchiato

https://gitlab.com/wireshark/wireshark/-/issues/19297 ? maybe related

Might be related to this: https://github.com/nmap/npcap/issues/628 https://gitlab.com/wireshark/wireshark/-/issues/18414

Another problem might be that M1 mavs might not (but probably is) supporting monitor mode. While wireshark is currently working on a native version it ptobably supports. But the ecosystem (M1/M2) is fairly New and might require some tweaking/configuration to enable monitor mode

Rather than simply running Wireshark via "sudo" you should really follow the instructions described here, since doing that minimizes the number of processes running with elevated privileges, which is a good thing. There's a link on that page to specific instructions for Debian-based distros, which I'd expect to include Mint. Related to this, I'm pretty sure all the Wireshark installations I remember doing in the past few years on various Linux platforms via the appropriate package mangers have popped up a window on first launch describing the appropriate measures to take to allow non-root users to capture traffic, which were pretty much just a summary of the steps described in the second link I mentioned, but I'm not a heavy Linux user so my experience with this is a bit limited.

I then pasted all this into Excel and using LEFT, RIGHT I pared the information in the cell to their own cells. So now I have Interface, VLAN, MAC, and OUI columns. I then took the Wireshark database and pasted it onto a different sheet. I then used VLOOKUP and made a column where I resolved the OUI to its corresponding Vendor.

If this isn’t an academic exercise, you should probably know that https://github.com/alobbs/macchanger exists and has already figured out some of the logic :) That’s the package that Kali and Tails package, so it’s likely pretty good. There’s also https://github.com/EtiennePerot/macchiato which the Tails people mention as something they would have used if macchanger wasn’t already packaged in Debian.