This is our old Q&A Site. Please post any new questions and answers at

Right now I am using MacOS X with version 10.6.7 and a 2 Ghz Intel Core duo. Every time I double click Wireshark, the program opens and then instantly quits. Can you explain to me what's going on? If you need more info please let me know. Thanks.

asked 17 May '11, 11:21

redelman431's gravatar image

accept rate: 0%

edited 19 Apr '12, 12:25

grahamb's gravatar image

grahamb ♦

What version of Wireshark are you using?

(17 May '11, 12:38) multipleinte...

version 1.4.6

(17 May '11, 13:45) redelman431

@redelman431 Can you try 1.6.0rc1?

(17 May '11, 15:24) Gerald Combs ♦♦

Same thing happens.

(17 May '11, 15:37) redelman431

Are you able to run tshark from the command-line? What happens if you try to start Wireshark from the command-line - do you get any error messages printed out?

(18 May '11, 19:10) cmaynard ♦♦

Your console log should be capturing these crashes (/Applications/Utilities/Console). Also check for Wireshark crash reports in ~/Library/Logs/DiagnosticReports/wireshark-bin_*.crash.

(18 May '11, 20:12) helloworld

This is a common problem and so far there are no good answers. The best answer I have seen about this is: at the bottom he says: Easiest? Contact the folks that are administering the Wireshark download kit for OS X, and tell them that it's broken, and pass along the errors you're getting.

The Wireshark installer package deals with the installation itself; with locating the tools in the expected places. (Wireshark is clearly not set up as a Mac application bundle - which you could then drag where you want ...

(19 Apr '12, 10:00) WantaKnow

There's no "this" here - there's more than one problem. The problem redelman431's seeing might be the comment "libfreetype is too old" problem, or it might be "running the 64-bit build on a 32-bit machine".

The fastest way to try to deal with the "libfreetype is too old" problem is to update to 10.6.8 and install all the security updates (keep running Software Update until it has no updates for you); that could get things going in a relatively short period of time.

(19 Apr '12, 15:25) Guy Harris ♦♦

And, actually, Wireshark is an application bundle that you can drag elsewhere - I just did that (dragged it from /Applications to my home directory) and it worked. The bundle doesn't include libfreetype, but it doesn't include libSystem either; it relies on the OS to supply that. (If MrHoffman thinks that only drag-install apps are application bundles, he's mistaken.)

The problem is that, as per bug 5937, Wireshark is built against the library versions on the buildbot.

(19 Apr '12, 15:30) Guy Harris ♦♦
showing 5 of 9 show 4 more comments

try installing XCode.

permanent link

answered 18 Apr '12, 09:00

Abhishek's gravatar image

accept rate: 0%

Did you install this from one of the .dmg's on If so, did you install the 32-bit Leopard version or the 64-bit Snow Leopard version? If you have a Core Duo processor, rather than a Core 2 or a Core i{3,5,7} processor, you have a 32-bit processor and the 64-bit version will not run, so you have to install the 32-bit Leopard version even though your machine is running Snow Leopard (we aren't building a 64-bit Leopard version).

permanent link

answered 18 Apr '12, 11:20

Guy%20Harris's gravatar image

Guy Harris ♦♦
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 17 May '11, 11:21

question was seen: 7,212 times

last updated: 19 Apr '12, 15:30

p​o​w​e​r​e​d by O​S​Q​A