I just downloaded and installed wire shark on Mac OSX 10.6.4 when I opened it the first time it gave me a messege that it will require a few minutes to start up. It never did start up, and double clicking the icon does nothing. It simply wont start. what did I do wrong?

asked 12 Jun '11, 11:36

iwaschosen's gravatar image

iwaschosen
1111
accept rate: 0%

edited 19 Apr '12, 12:24

grahamb's gravatar image

grahamb ♦
7.8k224110


See the answer to a similar question.

You should check your syslog for any errors from Wireshark. Alternatively, you can try starting Wireshark from the command line, where you might see error messages that are not captured in the syslog.

There are a few ways to check your syslog:

  • From Terminal, enter: syslog -C | grep wireshark
  • From Terminal, enter: /Applications/Utilities/Console.app/Contents/MacOS/Console &
  • From Finder, navigate to /Applications/Utilities/Console.app/Contents/MacOS/Console

To start Wireshark from the command line, simply enter wireshark from Terminal (assuming the binary is in your path). You should see some kind of error message printed at the Terminal as soon as Wireshark crashes.

link

answered 12 Jun '11, 19:48

helloworld's gravatar image

helloworld
2.7k21740
accept rate: 27%

thanks, I managed to get the crash report,

Dyld Error Message: Library not loaded: /usr/X11/lib/libfreetype.6.dylib Referenced from: /Users/michal/Desktop/Wireshark.app/Contents/Resources/bin/wireshark-bin Reason: Incompatible library version: wireshark-bin requires version 13.0.0 or later, but libfreetype.6.dylib provides version 10.0.0

where can I obtain the required library?

(12 Jun '11, 20:33) iwaschosen

Install MacPorts, and then enter from Terminal: sudo port install freetype

(12 Jun '11, 20:52) helloworld

I just did a system update, and wireshark now opens properly and runs thanks a lot!

(12 Jun '11, 21:03) iwaschosen

I just downloaded the latest version of wireshark and ran sudo port install freetype, but wireshark now requires 14.0.0 or later and freetype only updates to 13.0.0, you guys have really got to start thinking through your dependencies better and the impact they have on us mere mortals who are just trying to use your software.

(19 Apr '12, 12:11) WantaKnow

freetype is part of OS X's X11 package, and, if Wireshark's using that version of freetype, a MacPorts update won't help. If you're not running the latest version of Snow Leopard, there will be a problem because, as per bug 5937, the GTK+ library we supply with Wireshark is built against the libraries in the OS version on the buildbot, not the ones in the SDK.

(19 Apr '12, 14:25) Guy Harris ♦♦

Yes, with the dmgs from wireshark.org, a software update to the latest version of OS X (matching what's on the buildbot that built the dmg) would help. A MacPorts update will probably not update the version of libfreetype that came with the system, and thus will probably not help.

(19 Apr '12, 14:39) Guy Harris ♦♦
showing 5 of 6 show 1 more comments

Wireshark was built against, I suspect, 10.6.8; as the GTK+ library that comes with the Wireshark dmgs from wireshark.org is built against the libraries in the OS version on the buildbot, not the ones in the Snow Leopard SDK, this means that the resulting Wireshark may not work on older versions of Snow Leopard. This is bug 5937.

link

answered 19 Apr '12, 14:27

Guy%20Harris's gravatar image

Guy Harris ♦♦
11.0k226140
accept rate: 17%

Even some 10.6.8 systems are not able to support wireshark. Perhaps the person doing the build had a newer flavor of GTK+ library and if so I would love to see a post that walks through getting it installed on my 10.6.8 system. I tried but couldn't get all of the dependencies resolved. Do you really need to build against the dev box libs, couldn't you just have a stock set of libs you compile against on a build box?

(19 Apr '12, 14:39) WantaKnow

I tried but couldn't get all of the dependencies resolved.

Have you tried just running the macosx-setup.sh script in the top-level source directory? It should download, build, and install the support libraries. If it doesn't, file a bug in the Wireshark bugzilla.

Do you really need to build against the dev box libs, couldn't you just have a stock set of libs you compile against on a build box?

That's exactly what bug 5937 is all about; the "stock set" would be the set in the Snow Leopard SDK.

(19 Apr '12, 15:03) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×98
×72
×29

Asked: 12 Jun '11, 11:36

Seen: 7,005 times

Last updated: 19 Apr '12, 21:33

powered by OSQA