1#!/bin/sh
2
3#
4# Remove the following:
5# - The ChmmodBPF launch daemon
6# - The ChmmodBPF script
7# - The access_bpf group
8#
9
10CHMOD_BPF_PLIST="/Library/LaunchDaemons/org.wireshark.ChmodBPF.plist"
11BPF_GROUP="access_bpf"
12
13launchctl unload -F "$CHMOD_BPF_PLIST"
14
15dscl . -read /Groups/"$BPF_GROUP" > /dev/null 2>&1 && \
16    dseditgroup -q -o delete "$BPF_GROUP"
17
18rm -rf "/Library/Application Support/Wireshark"
19
20rm -f "$CHMOD_BPF_PLIST"
21
22rm -rf /Library/StartupItems/ChmodBPF
23