This is our old Q&A Site. Please post any new questions and answers at

I installed the 64bit version of Wireshark on Windows 10. This screenshot shows what I see when I launch Wireshark which does not look at all like the GUI expected. After restarting my computer, it then went through about a minute of "registering dissectors". For example "registering dissectors cmd" and a whole lot more. Is any of this normal? The startup screen still does not look normal, the same as the first launch of the software.

asked 01 May '16, 22:22

DanMiller's gravatar image

accept rate: 0%

edited 01 May '16, 23:02

Guy%20Harris's gravatar image

Guy Harris ♦♦

So what's unusual or incorrect about that screenshot? Nothing looks wrong to me. "It's different from what I see with 1.12" isn't "it's not correct" - the main screen changed significantly between Wireshark 1.12 and Wireshark 2.0, and that's a perfectly normal 2.0 main screen.

And "registering dissectors" is one of the stages of starting up, and has been before 2.0 - the only difference between the old GTK+ interface in 1.12 and the new Qt interface in 2.0 is that the startup progress indications are part of the main screen in 2.0 but part of a separate splash screen window in 1.12. I'm surprised it takes about a minute on your machine, but maybe that's a Windows vs. OS X issue, or a "your machine vs. my machine" issue.

(01 May '16, 23:12) Guy Harris ♦♦

Request you to create shortcut of wireshark-gtk.exe on your desktop which is the part of installation directory to look same as wireshark older version.

(01 May '16, 23:29) Dinesh Babu ...

Thank you for the quick reply. I was following along with a training course to learn Wireshark and the opening screen looked much different. I launched the legacy version and that interface looks the way I was expecting. I didn't realize they had changed the interface. Sounds like all is well, thanks!

(02 May '16, 06:35) DanMiller

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(02 May '16, 07:16) Jaap ♦

The Wireshark 2.0.3 default GUI is Qt based, while the 1.x series was GTK+ based by default. The switch to the Qt based default interface has been in the works for quite some time and was the main reason to bump the major release number to 2.

permanent link

answered 02 May '16, 01:48

Jaap's gravatar image

Jaap ♦
accept rate: 14%

To make it easier on yourself, and not have to translate your video training windows over the new interface while learning, re-install Wireshark 2.0.3 and select the "Wireshark Legacy Desktop Icon" from the shortcuts. alt text

Then you'll get a Wireshark Legacy icon on the desktop that runs the interface you'll be able to use and follow your video with ease. alt text

permanent link

answered 03 May '16, 07:32

coloncm's gravatar image

accept rate: 66%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 01 May '16, 22:22

question was seen: 2,194 times

last updated: 03 May '16, 07:32

p​o​w​e​r​e​d by O​S​Q​A