Wireshark · Wireshark-users: [Wireshark-users] Trying to get Wireshark up and running via MacPorts

[Kok-Yong Tan <ktan@xxxxxxxxxxxxxxxxxxx>]

I'm having a problem getting Wireshark up and running via MacPorts  
and X11 on a 8GB RAM, 140GB free drive space, dual 2GHz G5 tower  
system with OS X version 10.4.11 and with X11 Update 2006 applied  
(providing me with X11 v1.1.3).  There are no warnings or errors  
whatsoever during the builds of Wireshark or Macports but when I try  
to fire up Wireshark from a xterm window under /Utilities/X11, I get  
a bus error. The version information when I try to run Wireshark from  
an xterm under X11 that I get is this:

> zeus:/opt/local/bin kytan$ sudo wireshark -v
> wireshark 0.99.6
>
> Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and  
> contributors.
> This is free software; see the source for copying conditions. There  
> is NO
> warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR  
> PURPOSE.
>
> Compiled with GTK+ 2.12.1, with GLib 2.14.3, with libpcap 0.9.5,  
> with libz
> 1.2.3, without libpcre, without Net-SNMP, without ADNS, without  
> Lua, without
> GnuTLS, without Gcrypt, with MIT Kerberos, without PortAudio,  
> without AirPcap.
> NOTE: this build doesn't support the "matches" operator for  
> Wireshark filter
> syntax.
>
> Running on Darwin 8.11.0, with libpcap version 0.9.5.
>
> Built using gcc 4.0.1 (Apple Computer, Inc. build 5367).

I built Wireshark by using the "sudo port -R install wireshark"  
command and this seemed to automatically build the wireshark variant  
as seen below:

> zeus:/opt/local/bin kytan$ port installed
> The following ports are currently installed:
>   apr @1.2.11_0 (active)
>   apr-util @1.2.10_0 (active)
>   atk @1.20.0_1 (active)
>   cairo @1.4.10_0 (active)
>   db4 @4.3.28_0+darwin_7 (active)
>   db44 @4.4.20_1+darwin_8 (active)
>   expat @2.0.1_0 (active)
>   fontconfig @2.5.0_0+macosx (active)
>   freetype @2.3.5_0 (active)
>   gettext @0.17_1 (active)
>   glib2 @2.14.3_0 (active)
>   gtk2 @2.12.1_0 (active)
>   jpeg @6b_2 (active)
>   libiconv @1.12_0+darwin_8 (active)
>   libpcap @0.9.5_1 (active)
>   libpng @1.2.23_0+darwin_8 (active)
>   ncurses @5.6_0+darwin_8 (active)
>   ncursesw @5.6_0+darwin_8 (active)
>   neon @0.26.4_0 (active)
>   openssl @0.9.8g_0+darwin_8 (active)
>   pango @1.18.3_0 (active)
>   pkgconfig @0.22_0 (active)
>   readline @5.2.007_0 (active)
>   render @0.9_1 (active)
>   sqlite3 @3.5.2_0+darwin_8 (active)
>   subversion @1.4.5_0 (active)
>   tiff @3.8.2_1+darwin_8+macosx (active)
>   wireshark @0.99.6_0+darwin_8 (active)
>   Xft2 @2.1.12_0 (active)
>   xorg-inputproto @1.4.2_0 (active)
>   xorg-kbproto @1.0.3_0 (active)
>   xorg-libpthread-stubs @0.1_0 (active)
>   xorg-libX11 @1.1.3_0 (active)
>   xorg-libXau @1.0.3_0 (active)
>   xorg-libxcb @1.0_0 (active)
>   xorg-util-macros @1.1.5_0 (active)
>   xorg-xcb-proto @1.0_0 (active)
>   xorg-xcmiscproto @1.1.2_0 (active)
>   xorg-xextproto @7.0.2_0 (active)
>   xorg-xproto @7.0.11_1 (active)
>   xorg-xtrans @1.0.4_0 (active)
>   xrender @0.9.0_1+darwin_8 (active)
>   zlib @1.2.3_1 (active)

The following variants are available for building Wireshark:

> zeus:/opt/local/bin kytan$ port variants wireshark
> wireshark has the variants:
>         universal
>         darwin_6
>         darwin_7
>         darwin_8
>         darwin_9
>         adns
>         gnutls
>         libgcrypt
>         ipv6
>         net_snmp
>         pcre
>         no_ssl
>         no_x11

Should I have built a variant of Wireshark other than the default  
darwin_8 variant or something other than the latest libpcap, glib,  
gtk, etc., libraries?  Would appreciate any help in getting wireshark  
to run.  I have a crashdump log of Wireshark and can provide that if  
the above information isn't sufficient for someone to tell me where I  
went wrong in the compile of Wireshark under MacPorts.  Thanks in  
advance.
--
Reality Artisans, Inc.            #   Network Wrangling and System  
Delousing
P.O. Box 565, Gracie Station      #   Apple Certified Help Desk  
Specialist
New York, NY 10028-0019           #   Apple Consultants Network member
<http://www.realityartisans.com>  #   Apple Developer Connection member
(212) 369-4876 (Voice)            #   (212) 860-4325 (Fax)
PGP Fingerprint:  77B3 D1E9 D24B 4FA9 9606  6C8D 62E4 2E4A 6FDD 9FD5