This is a static archive of our old Q&A Site. Please post any new questions and answers at

Can I move the Wireshark window in OS X Mavericks?


I've got Wireshark running in OS X Mavericks, but I don't see how I can move the window. There's no title bar visible. I can move it between monitors by hitting control-up arrow and dragging it between, but on either monitor the window goes flush up to the upper left and I can't move it. Nothing in the XQuartz menus seems to offer help along these lines. Does anyone know how to do this? (I'm a Mac and X11 noob, btw.)

asked 19 Mar '14, 22:22

uCallHimDrJ0NES's gravatar image

accept rate: 0%

What do you mean there's no title bar? You don't see a bar at the top of the Wireshark GUI with the red/yellow/green buttons on the left? I do, on my Mac Mavericks. On the Mac top toolbar (the one that has the Apple icon on the left, and should say "X11" to the right of that), select Window->Zoom. See if that shows it. If not, post your Wireshark version information here.

(20 Mar '14, 09:46) Hadriel

Yes, I am having this same problem. I opened another related question. There is an interface anomaly problem whereby the menu bar for wireshark is opening behind Mac OSXs preventing the user from grabbing the menu bar of wireshark. This is extremely annoying.

bash-3.2$ wireshark -version 2014-06-18 10:27:15.746 defaults[43269:507] The domain/default pair of (kCFPreferencesAnyApplication, AppleAquaColorVariant) does not exist 2014-06-18 10:27:15.759 defaults[43270:507] The domain/default pair of (kCFPreferencesAnyApplication, AppleHighlightColor) does not exist wireshark 1.10.8 (v1.10.8-2-g52a5244 from master-1.10)

Copyright 1998-2014 Gerald Combs [email protected] and contributors. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.17, with Cairo 1.10.2, with Pango 1.30.1, with GLib 2.36.0, with libpcap, with libz 1.2.3, without POSIX capabilities, without libnl, with SMI 0.4.8, without c-ares, without ADNS, with Lua 5.1, without Python, with GnuTLS 2.12.19, with Gcrypt 1.5.0, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Jul 16 2013 19:05:52), with AirPcap.

Running on Mac OS X 10.9.3, build 13D65 (Darwin 13.2.0), with locale .UTF-8, with libpcap version 1.3.0 - Apple version 41, with libz 1.2.5, GnuTLS 2.12.19, Gcrypt 1.5.0, without AirPcap. Intel(R) Xeon(R) CPU E5620 @ 2.40GHz

Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build 2336.9.00).

(18 Jun '14, 10:27) burnbrighter

One Answer:


I have more information on this - this is related to how XQuartz works with Spaces in Mavericks and perhaps multiple monitors (I have 4). Mavericks introduces the concept of individual Spaces per screen. As a workaround, you can disable this functionality in the preferences for Mission Control and uncheck "Display have separate Spaces". This solved my problem, but I don't see this as a fix and I'm not sure if this is an XQuartz problem only.

answered 19 Jun '14, 10:24

burnbrighter's gravatar image

accept rate: 0%

This tip works. As an addition if you uncheck "Displays have separate spaces" and then log out and back in and launch wireshark, all you have to do is then move the window to somewhere else and quick wireshark.

Then you can turn on the separate spaces setting again and next time you launch wireshark it will load where you left it.

Basically Wireshark is loading the first time with its top/left positioning "below" the menubar. So you can't move it.

(23 Jul '14, 11:14) PyjamaSam