Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Linking on OSX Sierra

From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Fri, 7 Oct 2016 16:03:26 -0700
On 10/7/16 7:45 AM, Evan Huus wrote:
> Hey all, recently upgrade my mac to Sierra and tried to revive my
> wireshark build environment. I got it compiling (out-of-tree cmake)
> and most of the tools (tshark) etc seem to work, but:
> 
> $ ./run/wireshark
> Listening on en0
> 155 packets seen, 155 packets counted after pcap_dispatch returns
> ...
> 
> No UI ever opens. I have Qt5 installed, and I checked my
> CmakeCache.txt and it is detected and building the UI module
> (BUILD_wireshark:BOOL=ON). The other weird part is:
> 
> $ ./run/wireshark -h
> Usage: Wireshark [ -mn ] [ -i interface ] [ -t timeout] [expression]
> 
> That's *all* it outputs. I have to assume that some other binary is
> being linked on top of the wireshark binary (tshark et al seem
> unaffected) but I don't recognize that option set.
> 
> Any ideas? Has anybody seen this before?

Weird. ./run/wireshark should be a shell script generated by CMakeLists.txt
that execs run/Wireshark.app/Contents/MacOS/Wireshark. Does running
run/Wireshark.app/Contents/MacOS/Wireshark behave differently?