This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark not opening on OS X Yosemite

0

I have uninstalled both wireshark and x11, restarted, and then installed both. Still does not open.

asked 14 Nov '14, 08:28

zero%20visual's gravatar image

zero visual
1111
accept rate: 0%

edited 14 Nov '14, 16:21

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196

What messages are logged in Console?

(14 Nov '14, 16:22) Guy Harris ♦♦

One Answer:

0

Mine also crashed. log below. I 'fixed' it by creating linking /usr/X11/lib to /opt/X11/lib. Non-ideal. Not sure why the build wants /usr/X11/lib for the dylib.

Process: wireshark-bin [27506] Path: /Applications/Wireshark.app/Contents/Resources/bin/wireshark-bin Identifier: wireshark-bin Version: ??? Code Type: X86-64 (Native) Parent Process: Wireshark [27491] Responsible: Wireshark [27491] User ID: 501

Date/Time: 2014-11-26 15:07:46.327 -0500 OS Version: Mac OS X 10.10.1 (14B25) Report Version: 11 Anonymous UUID: 916AFB86-3665-D0D6-D61E-84E34AFA401F

Sleep/Wake UUID: 0373CED3-FFE0-4B8C-9F3A-B3CD3A2A180A

Time Awake Since Boot: 200000 seconds Time Since Wake: 20000 seconds

Crashed Thread: 0

Exception Type: EXC_BREAKPOINT (SIGTRAP) Exception Codes: 0x0000000000000002, 0x0000000000000000

Application Specific Information: dyld: launch, loading dependent libraries

Dyld Error Message: Library not loaded: /usr/X11/lib/libXext.6.dylib Referenced from: /Applications/Wireshark.app/Contents/Resources/lib/libgtk-x11-2.0.0.dylib Reason: image not found

answered 26 Nov '14, 12:21

kmb's gravatar image

kmb
1
accept rate: 0%

Not sure why the build wants /usr/X11/lib for the dylib.

Because that's where it is on those versions of Mac OS X that include X11 as a standard part of the OS.

Apple stopped shipping X11 with the OS in Mountain Lion and, instead, contributed to (and hosted) the XQuartz project, and pointed users there. That installs X11 under /opt/X11, with a symbolic link from /usr/X11 to /opt/X11.

I don't know whether the upgrade from Mountain Lion to Mavericks preserves that link. The upgrade from Mavericks (and, presumably, from Mountain Lion) to Yosemite does NOT preserve that link, unfortunately, so you have to put it back manually.

The correct long-term fix for this is to stop using X11 for Wireshark on OS X; the plan is to stop using GTK+ entirely and use Qt instead - Qt for OS X (which appears to be better supported than "native" GTK+-on-OS X) does not use X11.

(26 Nov '14, 13:46) Guy Harris ♦♦

However, un-installing X11 and re-installing it should cause the /usr/X11 link to be planted, IF there's no /usr/X11 directory (which there shouldn't be, if you were running Mountain Lion or Mavericks, with XQuartz installed, and upgraded to Mavericks).

So it sounds as if zero visual might have a different problem; that's why I asked "What messages are logged in Console?"

(26 Nov '14, 13:56) Guy Harris ♦♦