This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark doesn't start after upgrading to Mac OS X Yosemite

5
1

I just update my Mac OS to the Yosemite Beta 3, and the Wireshark, which used to function well, didnt work.

Every time I open wireshark, it just appear on the menu bar for a while and then quite. the user interface never shows up.

I have unistall fully wireshark and installed it agian and again, and nothing helps. Can anyone help on this issue?

asked 16 Sep '14, 09:48

Zicheng%20Wang's gravatar image

Zicheng Wang
76●1●3●3
accept rate: 0%

edited 18 Oct '14, 00:53

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k●3●35●196

and when i run the wireshark in the X11 terminal it shows the following error

bash-3.2$ sudo wireshark
 Password:
 2014-09-16 12:53:27.554 defaults[5389:1243053] 
 The domain/default pair of (kCFPreferencesAnyApplication, AppleAquaColorVariant) does not exist
 2014-09-16 12:53:27.574 defaults[5390:1243061] 
 The domain/default pair of (kCFPreferencesAnyApplication, AppleHighlightColor) does not exist
 dyld: Library not loaded: /usr/X11/lib/libcairo.2.dylib
  Referenced from: /Applications/Wireshark.app/Contents/Resources/bin/wireshark-bin
  Reason: image not found
(16 Sep '14, 09:56) Zicheng Wang
3 Answers:
active answersoldest answersnewest answerspopular answers
8

linking the directories worked for me:

sudo ln -s /opt/X11 /usr/X11

permanent link

answered 22 Oct '14, 09:47

Erik13's gravatar image

Erik13
121●1●2●2
accept rate: 0%

Excellent solution. I works for other application as well.

(02 Nov '14, 15:24) Julio

Yes, any X11 application that's looking for X libraries/configuration files/etc. under /usr/X11 will fail after an upgrade to Yosemite, and that command will fix the problem by putting back the link that the Yosemite upgrade removed.

(02 Nov '14, 17:48) Guy Harris ♦♦

Awesome solution. Thanks bud!

(03 Nov '14, 02:23) mariansan

That worked for me.

(04 Nov '14, 14:07) RDF50

That worked for me also.

(10 Nov '14, 09:37) tc0nn

This worked like a charm. Thanks for sharing this knowledge!

(04 Dec '14, 16:10) Mechafranko

Worked for me. Thanks!

(02 Feb '15, 10:11) loseki

Worked perfect. Thank you.

(17 Apr '15, 13:35) kcb263

Thanks, I used Wireshark2 as a Workaround before

(17 Apr '15, 14:28) Christian_R
showing 5 of 9 show 4 more comments
1

Make sure that:

  1. /opt/X11 has X11 installed under it (for example, make sure /opt/X11/lib/libcairo.2.dylib exists);
  2. /usr/X11 is a symbolic link to /opt/X11 (ls -ld /usr/X11 should report it as such).

Installing XQuartz puts it under /opt/X11, and makes /usr/X11 a symbolic link to /opt/X11. Upgrading to Yosemite appears to destroy the /usr/X11 link; re-installing XQuartz puts the link back, which is why un-installing and re-installing XQuartz solved the problem for one of the people answering your question.

permanent link

answered 16 Sep '14, 17:51

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k●3●35●196
accept rate: 19%

edited 18 Oct '14, 00:56

I had the same issue with the actual Yosemite rollout. I uninstalled both X11 and Wireshark from my new install. I then installed X11 and Wireshark in that order. It all works now and seems to be stable. I hope this helps for you.

(17 Oct '14, 09:38) dotnetbrett

Un-installing and re-installing X11 would probably be sufficient; the problem appears to be that upgrading to Yosemite gets rid of the /usr/X11 symbolic link to /opt/X11, and re-installing XQuartz puts the link back.

(18 Oct '14, 00:58) Guy Harris ♦♦
0

See the answer to this question that implies the upgrade to Yosemite "helpfully" moved X11 from /usr/X11 to opt/X11.

permanent link

answered 16 Sep '14, 10:08

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206
accept rate: 22%

Actually, in Mountain Lion and later, X11 is supposed to be in /opt/X11; it's not part of the OS, it's an add-on package (from Apple, but still an add-on package). However, at least on my machine, /usr/X11 is a symlink to /opt/X11, so you should probably make sure that Xquartz is installed under /opt/X11 and that /usr/X11 is a symbolic link to /opt/X11.

(16 Sep '14, 17:49) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

learn more about Markdown

Question tags:

×53
×15

question asked: 16 Sep '14, 09:48

question was seen: 114,399 times

last updated: 17 Apr '15, 14:28

Related questions

Unable to start wireshark in Mac OSX Yosemite

Mac OS X 10.6 Installation problem

Is there any way to see the codecs used in voip application in wireshark(G729,AMR...)

Wireshark crash after launch

How to update Hosts Files for Wireshark in Mac os

Wireshark doesn't start on Yosemite

Wireshark won't start on MacOS - missing libraries?

How do I reassemble monitor mode 802.11 protocol data into TCP/IP packets?

Wire shark does not Open!

capture filter expression always invalid

about | faq | privacy | support | contact

p​o​w​e​r​e​d by O​S​Q​A