This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark won’t start on MacOS - missing libraries?

0

Wireshark fails on 10.7.5 with the following errors:

Couldn't load module /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/interlink.so: dlopen(/Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/interlink.so, 10): Symbol not found: _dissector_get_port_handle Referenced from: /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/interlink.so Expected in: flat namespace in /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/interlink.so

Couldn't load module /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/sercosiii.so: dlopen(/Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/sercosiii.so, 10): Symbol not found: _dissector_add Referenced from: /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/sercosiii.so Expected in: flat namespace in /Applications/Wireshark.app/Contents/Resources/lib/wireshark/plugins/sercosiii.so

Am I missing something that should be in there?

asked 18 Oct '12, 13:20

meatwad_650's gravatar image

meatwad_650
1111
accept rate: 0%


One Answer:

1

You probably installed a newer version of Wireshark when you had an older one installed; the installer doesn't remove old plugins, so if a dissector is a plugin in the older version of Wireshark and a built-in dissector in the newer version, the old plugin is left behind. If the plugin interface changes - if, for example, a routine's name changes, such as dissector_get_port_handle() changing to dissector_get_uint_handle() or dissector_add() changing to dissector_add_uint() - then the old plugins won't load.

It looks as if OS X's run-time linker fails if the application tries to load a plugin with dlopen() and a symbol can't be found - and, it appears, doesn't just return a "can't load that plugin" error; instead, it causes the program to fail.

Try uninstalling Wireshark completely and then re-installing it.

The installer not removing old plugins is bug 7401. I'll look into why the run-time linker is killing Wireshark rather than just returning a "that plugin won't load" error.

answered 18 Oct '12, 21:48

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%