Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Trying to get Wireshark up and running via MacPorts

From: Kok-Yong Tan <ktan@xxxxxxxxxxxxxxxxxxx>
Date: Thu, 22 Nov 2007 23:15:59 -0500
I'm having a problem getting Wireshark up and running via MacPorts and X11 on a 8GB RAM, 140GB free drive space, dual 2GHz G5 tower system with OS X version 10.4.11 and with X11 Update 2006 applied (providing me with X11 v1.1.3). There are no warnings or errors whatsoever during the builds of Wireshark or Macports but when I try to fire up Wireshark from a xterm window under /Utilities/X11, I get a bus error. The version information when I try to run Wireshark from an xterm under X11 that I get is this:

zeus:/opt/local/bin kytan$ sudo wireshark -v
wireshark 0.99.6

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.1, with GLib 2.14.3, with libpcap 0.9.5, with libz 1.2.3, without libpcre, without Net-SNMP, without ADNS, without Lua, without GnuTLS, without Gcrypt, with MIT Kerberos, without PortAudio, without AirPcap. NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Darwin 8.11.0, with libpcap version 0.9.5.

Built using gcc 4.0.1 (Apple Computer, Inc. build 5367).

I built Wireshark by using the "sudo port -R install wireshark" command and this seemed to automatically build the wireshark variant as seen below:

zeus:/opt/local/bin kytan$ port installed
The following ports are currently installed:
  apr @1.2.11_0 (active)
  apr-util @1.2.10_0 (active)
  atk @1.20.0_1 (active)
  cairo @1.4.10_0 (active)
  db4 @4.3.28_0+darwin_7 (active)
  db44 @4.4.20_1+darwin_8 (active)
  expat @2.0.1_0 (active)
  fontconfig @2.5.0_0+macosx (active)
  freetype @2.3.5_0 (active)
  gettext @0.17_1 (active)
  glib2 @2.14.3_0 (active)
  gtk2 @2.12.1_0 (active)
  jpeg @6b_2 (active)
  libiconv @1.12_0+darwin_8 (active)
  libpcap @0.9.5_1 (active)
  libpng @1.2.23_0+darwin_8 (active)
  ncurses @5.6_0+darwin_8 (active)
  ncursesw @5.6_0+darwin_8 (active)
  neon @0.26.4_0 (active)
  openssl @0.9.8g_0+darwin_8 (active)
  pango @1.18.3_0 (active)
  pkgconfig @0.22_0 (active)
  readline @5.2.007_0 (active)
  render @0.9_1 (active)
  sqlite3 @3.5.2_0+darwin_8 (active)
  subversion @1.4.5_0 (active)
  tiff @3.8.2_1+darwin_8+macosx (active)
  wireshark @0.99.6_0+darwin_8 (active)
  Xft2 @2.1.12_0 (active)
  xorg-inputproto @1.4.2_0 (active)
  xorg-kbproto @1.0.3_0 (active)
  xorg-libpthread-stubs @0.1_0 (active)
  xorg-libX11 @1.1.3_0 (active)
  xorg-libXau @1.0.3_0 (active)
  xorg-libxcb @1.0_0 (active)
  xorg-util-macros @1.1.5_0 (active)
  xorg-xcb-proto @1.0_0 (active)
  xorg-xcmiscproto @1.1.2_0 (active)
  xorg-xextproto @7.0.2_0 (active)
  xorg-xproto @7.0.11_1 (active)
  xorg-xtrans @1.0.4_0 (active)
  xrender @0.9.0_1+darwin_8 (active)
  zlib @1.2.3_1 (active)

The following variants are available for building Wireshark:

zeus:/opt/local/bin kytan$ port variants wireshark
wireshark has the variants:
        universal
        darwin_6
        darwin_7
        darwin_8
        darwin_9
        adns
        gnutls
        libgcrypt
        ipv6
        net_snmp
        pcre
        no_ssl
        no_x11

Should I have built a variant of Wireshark other than the default darwin_8 variant or something other than the latest libpcap, glib, gtk, etc., libraries? Would appreciate any help in getting wireshark to run. I have a crashdump log of Wireshark and can provide that if the above information isn't sufficient for someone to tell me where I went wrong in the compile of Wireshark under MacPorts. Thanks in advance.
--
Reality Artisans, Inc. # Network Wrangling and System Delousing P.O. Box 565, Gracie Station # Apple Certified Help Desk Specialist
New York, NY 10028-0019           #   Apple Consultants Network member
<http://www.realityartisans.com>  #   Apple Developer Connection member
(212) 369-4876 (Voice)            #   (212) 860-4325 (Fax)
PGP Fingerprint:  77B3 D1E9 D24B 4FA9 9606  6C8D 62E4 2E4A 6FDD 9FD5