"Etherdump Lite" imports and graphically displays packet captures made by tcpdump or Wireshark. It supports importing files in the .pcap and .pcapng formats.

"Etherdump Lite" does not support directly capturing packets from the network. Raw Ethernet captures are not compatible with the "sandbox" security required by the MacOS App Store.

The full version "Etherdump" is available for free at https://networkmom.net/etherdump The full version is notarized by Apple and supports directly capturing packets off the network.

"Etherdump" and "Etherdump Lite" are implemented in Swift and SwiftUI. They are open source at https://github.com/darrellroot/Etherdump

"Etherdump Lite" version 1.1 supports the following frame/packet decodes:
Layer 2: Ethernet, 802.3, 802.2 SNAP
Layer 2+: ARP, BPDU, CDP, LLDP
Layer 3: IPv4, IPv6
Layer 4: TCP, UDP, ICMPv4, ICMPv6