[lttlrck]

On Linux you can give an executable admin access to network devices with setcap which narrows it down further. Is the same possible on OS X?

Edit. Actually this is worse than running as root isn't it!

[cyphar]

setcap is in principle better than setuid if your program is something like ping. Or in this case, wireshark.