Mac Homebrew and Wireshark

Question

I've installed Wireshark(.org) using Homebrew.

brew install wireshark

at the end the script says

==> ./configure --prefix=/usr/local/Cellar/wireshark/1.2.7 --disable-dependency-tracking --disable-wireshark
==> make
==> make install
==> Caveats
We don't build the X11 enabled GUI by default
==> Summary
/usr/local/Cellar/wireshark/1.2.7: 167 files, 50M, built in 5.4 minutes

I'm not able to find the 'wireshark' GUI.
Any idea of how to build it?

Thanks

Solution 1

$ brew options wireshark

Shows you options for wireshark, which lists --with-qt5. QT is the GUI toolkit that Wireshark uses since 1.10. Thus, install wireshark using the following command:

$ brew install wireshark --with-qt5

Or if you already have wireshark previosly:

$ brew reinstall wireshark --with-qt5

If you do not add this option the commandline tool tshark will be installed.

Solution 2

The new approach is to use brew install wireshark --with-qt.

The --with-x option no longer works.

More details on the switch to QT: https://blog.wireshark.org/2013/10/switching-to-qt/

Solution 3

Well, the system did warn you that it wouldn't install the X11 GUI. So maybe there is an option in the configuration phase that enables it? You'd need a whole extra set of stuff to run X11.

At http://www.wireshark.org/download.html there is a binary downstaller you could use...

Solution 4

There is a Mac .dmg app installer from the http://www.wireshark.org website. You must wait a while for it to start X11. It will seem as though it is not working, but the app is just very slow.

Solution 5

At some point, a cask formula was added. So the following command will actually install Wireshark, with the UI, as a regular app:

brew cask install wireshark

And you can then find it in Applications or via Spotlight.

View more solutions

Comments

[miku8]

Thanks for your response. I've X11, I just don't understand what I'm missing. I should build wireshark gui in some way I suppose... no mention of how to do it with homebrew. this is the script 'github.com/mxcl/homebrew/blob/master/Library/Formula/…' sorry I'm newbie

[user3745303]

Do it without the --disable-wireshark in the script. So edit the script... Maybe you'll get a problem with dependencies as well, so you could remove the --disable-dependency-tracking as well, but then of course you could get errors as well.... You do know that at the wireshark site there is a complete binary build of wireshark, installer and all ? That's a lot easier.

[hanxue]

Note that beginning with Wireshark 1.10.0 QT is used instead of GTK. So you can use the option --with-qt

[Louis]

brew reinstall wireshark --with-qt

[Sukima]

First time I've ever had a formula not install by default. It would be better if there was a --without-gui instead of blindly continuing without any GUI which most who install wireshark are probably expecting.

[Zoltán]

@hanxue how do I run it after installing it?

[subelsky]

I used the reinstall command, but to make it work I had to re-create the symlinks as explained in this github issue: rm '/usr/local/bin/wireshark' && brew link --overwrite wireshark

[Slump]

Just thought I'd add it appears the recommended option is now --with-qt5. I received this warning when trying as defined above: Warning: wireshark: --with-qt was deprecated; using --with-qt5 instead!

[user674669]

Direct link: 1.na.dl.wireshark.org/osx/Wireshark%203.0.6%20Intel%2064.dmg