Cannot run Wireshark on Mac OS Mavericks

Question

I've installed Wireshark on Mac OS Maverics and cannot run it - it displays the window which asks for the X11 the list does not contain anything similar to it. There is the button "Browse" but I do not know what should I browse for.

I've installed Wireshark, then XQuarz, then reinstalled both and still have this issue.

Answer 1

1

I thought it was an issue initially and was looking at this thread for a solution while I had Wireshark(X11 & Wireshark Icon at dock) running and after few mins, It did load.

answered 16 Dec '13, 06:14

GaNi
16●2
accept rate: 0%

edited 16 Dec '13, 06:15

Wow, you're right - after about 5 minutes it finally got to the main window. Luckily after that first time it appears to load quickly thereafter.

(06 Feb '14, 09:59) Hadriel

If that's the first X11 app you've ever run - or maybe it's "if that's the first GTK+-based X11 app you've ever run" - I think there's some first-time font initialization process.

Hopefully the move to Qt will get rid of a lot of the crap you currently have to do when running Wireshark on OS X.

(06 Feb '14, 15:37) Guy Harris ♦♦

No, I run wireshark all the time in X11... but from source I build on my Mac. This was the first time I tried a pre-built package from wireshark.org, in Mavericks. (I'd run pre-built on Lion and Mountain Lion before)

But yeah I'm loving the Qt version. I already prefer it over the X11 one, despite the missing stuff.

(07 Feb '14, 20:16) Hadriel

Answer 2

0

Hi!

Which versions of Wireshark and XQuartz you have installed? I've just tried to install the Wireshark 1.10.3 and XQuartz 2.7.5 - it works fine.

Small note: try to log off and log on again or reboot your computer for applying XQuartz settings.

answered 03 Dec '13, 01:03

mrav
16●4●4●8
accept rate: 0%

I've downloaded and installed Wireshark 1.10.3 Intel 64.dmg and XQuartz-2.7.5.dmg. Reboot did not help - still the same window asking for X11

(03 Dec '13, 05:03) AlexVN

Please try to run at first application XQuartz ("Applications"-->"Utilities"). After that run a Wireshark.

(03 Dec '13, 05:25) mrav

XQuatz icon appears in the dock, but Wireshark still asks for X11.

So I've clicked Browse button and navigated to "Applications"-->"Utilities"-->"XQuartz". Now Wireshark displays icon in the doc and exits immediately.

(03 Dec '13, 05:59) AlexVN

Try running it from terminal, in this way you will see what it reports.

(03 Dec '13, 06:15) Edmond

Thank you - finally, it works when it is started from the XQuarz terminal. Starting it from OSX terminal gives this error:

013-12-03 14:31:11.752 defaults[2296:507] 
The domain/default pair of (kCFPreferencesAnyApplication, AppleAquaColorVariant) does not exist
2013-12-03 14:31:11.762 defaults[2297:507] 
The domain/default pair of (kCFPreferencesAnyApplication, AppleHighlightColor) does not exist
(process:2286): Gtk-WARNING **: Locale not supported by C library.
Using the fallback 'C' locale.
(wireshark-bin:2286): Gtk-WARNING **: cannot open display:

XQuarz is loaded, of course.

(03 Dec ‘13, 06:34) AlexVN

From logs it is the same output, only that in my case i can open it through Applications & Terminal

(03 Dec ‘13, 12:12) Edmond

it works when it is started from the XQuarz terminal. Starting it from OSX terminal gives this error:

…

(wireshark-bin:2286): Gtk-WARNING **: cannot open display:

If the DISPLAY environment variable isn’t set in the OS X terminal (do env | egrep DISPLAY), that will prevent X11 apps from opening the display. After you install X11, you might have to close the OS X Terminal app and restart it in order to get DISPLAY set, or you might find that OS X Terminal windows opened after you install X11 have it set.

(11 Sep ‘14, 14:12) Guy Harris ♦♦

showing 5 of 7 show 2 more comments

Answer 3

Same problem. I had Wireshark 1.6 Deleted it and got newest version 1.12. Works now.