wireshark: unable to build under Mac OS X 10.5 Leopard

[eriktown@…]

After upgrading to Leopard and installing the new version of X11 and XCode Tools, I attempted to run Wireshark. It would run, but would crash whenever I tried to load a capture file or start capturing packets. I decided to try doing a clean reinstall of MacPorts and rebuild and reinstall Wireshark, but I can't get Wireshark to build successfully. It's choking on one of the dependencies:

$ sudo port install wireshark
Password:
--->  Building tiff with target all
Error: Target org.macports.build returned: shell command " cd "/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_release_ports_graphics_tiff/work/tiff-3.8.2" && make all " returned error 2
Command output: Making all in port
make[1]: Nothing to be done for `all'.
Making all in libtiff
make  all-am
Making all in tools
/bin/sh ../libtool --tag=CC --mode=link gcc  -O2 -Wall -W  -L/opt/local/lib -L/opt/local/lib -L/opt/local/lib -o tiffgt  tiffgt-tiffgt.o ../libtiff/libtiff.la ../port/libport.la -L/usr/X11/lib -framework GLUT -lobjc -framework OpenGL -ljpeg -lz -lc 
libtool: link: gcc -O2 -Wall -W -o .libs/tiffgt tiffgt-tiffgt.o  -L/opt/local/lib ../libtiff/.libs/libtiff.dylib ../port/.libs/libport.a -L/usr/X11/lib -framework GLUT -lobjc -framework OpenGL /opt/local/lib/libjpeg.dylib -lz -lc
ld: cycle in dylib re-exports with /usr/X11/lib/libGL.dylib
collect2: ld returned 1 exit status
make[1]: *** [tiffgt] Error 1
make: *** [all-recursive] Error 1

Error: The following dependencies failed to build: gtk2 tiff libpcap
Error: Status 1 encountered during processing.

I'm happy to provide any information you may require to troubleshoot this.

[jstrine@…]

I believe tiff was updated to build correctly for 10.5. "sudo port sync" should get you that updated.

That said, I have compiled wireshark with the updated tiff and still experience the crashing you describe. I think it may be related to X11 changes in Leopard.

[jstrine@…]

It appears this is a known bug to the wireshark folks. Specifically, they have a bugzilla item opened for it: ​http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1953. Also, they have expressed that it may be a problem with Apple's X11 or other X11 "frameworks" for lack of a better word. Check the bugzilla report for more info.

The current workaround seems to be to set your X11 to use Thousands of colors (X11 -> Preferences, when launched). Worked for me.

BTW, I'm assuming the error you originally reported (run then crash) is the same error I was getting (and that is detailed in the bugzilla report) and that the workaround has temporarily fixed.

[ryandesign (Ryan Carsten Schmidt)]

Has duplicate #13057.

[eriktown@…]

The tiff update and general Wireshark workaround worked for me, but it did not work for a friend of mine on a PPC-based Mac -- it fails at building GTK for him. Any chance there might be platform-based issues at work there?

[ghosthound]

I can successfully build and run on 10.5 PPC, so marking as resolved. Please re-open if there is still a problem.

[(none)]

Milestone Port Bugs deleted