This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark fails on 10.7.5 with the following errors:

Couldn't load module /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/interlink.so: dlopen(/Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/interlink.so, 10): Symbol not found: _dissector_get_port_handle Referenced from: /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/interlink.so Expected in: flat namespace in /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/interlink.so

Couldn't load module /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/sercosiii.so: dlopen(/Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/sercosiii.so, 10): Symbol not found: _dissector_add Referenced from: /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/sercosiii.so Expected in: flat namespace in /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/sercosiii.so

Am I missing something that should be in there?

asked 18 Oct '12, 13:20

meatwad_650's gravatar image

meatwad_650
1111
accept rate: 0%


You probably installed a newer version of Wireshark when you had an older one installed; the installer doesn't remove old plugins, so if a dissector is a plugin in the older version of Wireshark and a built-in dissector in the newer version, the old plugin is left behind. If the plugin interface changes - if, for example, a routine's name changes, such as dissector_get_port_handle() changing to dissector_get_uint_handle() or dissector_add() changing to dissector_add_uint() - then the old plugins won't load.

It looks as if OS X's run-time linker fails if the application tries to load a plugin with dlopen() and a symbol can't be found - and, it appears, doesn't just return a "can't load that plugin" error; instead, it causes the program to fail.

Try uninstalling Wireshark completely and then re-installing it.

The installer not removing old plugins is bug 7401. I'll look into why the run-time linker is killing Wireshark rather than just returning a "that plugin won't load" error.

permanent link

answered 18 Oct '12, 21:48

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×108
×53

question asked: 18 Oct '12, 13:20

question was seen: 2,941 times

last updated: 18 Oct '12, 21:48

p​o​w​e​r​e​d by O​S​Q​A