This is a static archive of our old Q&A Site. Please post any new questions and answers at

Wireshark 1.10.2 will not launch from Applications folder in Mac OS 10.8.5


I just now installed XQuartz 2.7.4 and Wireshark 1.10.2 for the first time. When I try to launch /Applications/ from Finder, I get a "Choose Application" dialogue window listing all of the other apps I should consider in order to open

From Terminal, I can launch /Applications/, which starts X11 and I then get the expected user interface. If I try to keep the application in the dock and launch it from there, I get the "Choose Application" dialogue

Launching /Applications/ also gets me the "Choose Application" dialogue window.

Should I expect to be able to launch Wireshark from Finder when I am in the Applications folder?


asked 02 Oct '13, 09:30

Jerald's gravatar image

accept rate: 0%

In the Finder view of /Applications, what icon does it show for Wireshark?

(02 Oct '13, 16:33) Guy Harris ♦♦

The icon in /Applications looks like this: alt text

Does that look correct to you? I took a look at the supporting files in, thinking that I could modify one to point to the binary that is working, but I haven't figured that out yet.


(02 Oct '13, 17:49) Jerald

What does the command

file /Applications/


(02 Oct '13, 17:55) Guy Harris ♦♦

The following is the output of file /Applications/

Wireshark: Mach-O executable i386

(02 Oct '13, 18:28) Jerald

OK, so what's printed if you type

open /Applications/

and what shows up in the Console window after you do that?

(02 Oct '13, 18:37) Guy Harris ♦♦

the line added to the Console after executing open /Applications/ is:

10/2/13 6:54:32.249 PM Wireshark[1577]: Performance: Please update this scripting addition to supply a value for ThreadSafe for each event handler: "/Library/ScriptingAdditions/SIMBL.osax"

(02 Oct '13, 18:55) Jerald

OK, but

  1. Does Wireshark open up when you do open /Applications/
  2. If not, is anything printed in the Terminal window where you run that command?
(02 Oct '13, 19:08) Guy Harris ♦♦

No, Wireshark does not open up if I am attempting to use /Applications/ There is no output in the terminal window after I execute the open command. The command-line prompt is returned immediately.

I do get the Choose Application dialogue window, as I mentioned before, like I did before when I launched from Finder.

I can start Wireshark from /Applications/

(02 Oct '13, 19:43) Jerald

What does the Finder show if you do control+click on the Wireshark icon and select Get Info? In particular, what's shown for "Kind:" in the "General:" section?

(02 Oct '13, 20:02) Guy Harris ♦♦

Guy, thank you for working through to try figure this out. I can't help but wonder about the Mac OS application packaging. The /Applications/ binary is 32-bit The /Applications/ is a 64-bit binary /Applications/ is an executable shell-script that launches wireshark-bin

It would appear to me that the wireshark script is not being executed.

Here's a snapshot of what you asked for:

alt text

(02 Oct '13, 20:45) Jerald

When I try to launch /Applications/ from Finder, I get a "Choose Application" dialogue window listing all of the other apps I should consider in order to open

Does that window say "Where is X11?" above the list of applications? (It does on Mavericks GM; that might be new in Mavericks, however.) It might be asking you to choose an application to use as an X11 server, in which case you should look for the Xquartz server and, if it's not in the list, use the "Browse" button (which is also in the Mavericks dialog, but might not be in the Mountain Lion dialog).

(09 Oct '13, 15:05) Guy Harris ♦♦

We're making progress!

Yes, the window displays, "Where is X11?" and I had to browse to Applications/Utilities in order to select XQuartz.

Now, when I select Wireshark from Applications, XQuartz is launched and a terminal window is opened. I exited from Wireshark, the terminal window and XQuartz twice. The third time that I launched Wireshark, XQuartz started and then Wireshark is launched properly.

(10 Oct '13, 12:56) Jerald

When launching Wireshark for the first time, you may get a "Choose Application" dialogue window that is displaying, "Where is X11?". Select Browse and navigate to Applications/Utilities and select Xquartz.

I didn't see Wireshark startup properly yet, so I exited Xquartz and launched Wireshark again. The second time, XQuartz started and then a terminal window opened. Wireshark was launched, but I don't see its window. I may not have been patient enough, but I chose to exit WS and XQ and then launch Wireshark again. This time the Wireshark window was displayed properly after XQuartz was started.

(10 Oct '13, 13:00) Jerald
showing 5 of 13 show 8 more comments