Open DKurilo opened 3 years ago
I have the same issue:
Below are *.crash
reports from console.app
Hope this helps.
EDIT:
libwiretap.11.dylib
libwsutil.12.dylib
Based on my brief investigation, I noted the following issues (see diff/patch at the bottom):
snappy-c.h
. I had to add snappy
for compilation to proceedzstd.h
. I had to add zstd
for compilation to proceed.For issue number 3, I noted that when using the latest zstd version 1.4.9
I encountered a make error immediately. Based on this macos setup shell script, I changed the zstd version to 1.4.2
.
It compiled for more than 6 hours, and I was preparing to create a pull request. Unfortuately it reached an error!!!:
[ 70%] Building C object epan/dissectors/CMakeFiles/dissectors.dir/packet-ncp2222.c.o
[ 70%] Building C object epan/dissectors/CMakeFiles/dissectors.dir/errno.c.o
[ 70%] Building C object epan/dissectors/CMakeFiles/dissectors.dir/packet-dcerpc-nt.c.o
[ 71%] Building C object epan/dissectors/CMakeFiles/dissectors.dir/packet-snort-config.c.o
[ 71%] Building C object epan/dissectors/CMakeFiles/dissectors.dir/usb.c.o
[ 71%] Building C object epan/dissectors/CMakeFiles/dissectors.dir/dissectors.c.o
[ 71%] Built target dissectors
make: *** [Makefile:160: all] Error 2
builder for '/nix/store/skfsg2dj3jny9v50mq3f5x5jdqg93bcp-wireshark-qt-3.4.4.drv' failed with exit code 2
error: build of '/nix/store/skfsg2dj3jny9v50mq3f5x5jdqg93bcp-wireshark-qt-3.4.4.drv' failed
I'm not really sure how to debug this further.
Hey, are you still interested in this ? If you are, I'd be happy to help you get this over the line. I have a darwin machine and I don't mind running the build before I go to sleep to test.
@happysalada , it would be great to have it working. I believe I need to find some time to figure out what you are going to do. :) If you have links to any resources that will help me to understand how it works, can you write them, please? I know I can read through documentation. I just didn't have time for this yet.
I think the way to go here is open a PR with the fix about the awk expression, then test and check the error. If you want to open a PR, I'm happy to test, post the error and we can discuss the fixes possible on the PR. I think there where quite some updates since this issue, so that's why the dependency proposed need to be checked again (snappy and zstd). I don't know at all how it works, I wanted to test today. I'm hoping the errors will be clear enough.
I marked this as stale due to inactivity. → More info
I tested nix run nixpkgs#wireshark-cli
on my macOS M1 machine and it appears to be working. I think this can be closed.
Tested on x86_64 darwin and it worked
I find that the GUI starts on macOS (x86_64-darwin), but fails to load the required libraries, and crashes soon afterward.
Upon opening the application, it presents a modal dialog with the following message:
Multiple problems found
The plugin 'usbdump.so' has no "plugin_version" symbol
The plugin 'ethercat.so' has no "plugin_version" symbol
The plugin 'wimax.so' has no "plugin_version" symbol
The plugin 'wimaxasncp.so' has no "plugin_version" symbol
The plugin 'stats_tree.so' has no "plugin_version" symbol
The plugin 'profinet.so' has no "plugin_version" symbol
The plugin 'transum.so' has no "plugin_version" symbol
The plugin 'gryphon.so' has no "plugin_version" symbol
The plugin 'unistim.so' has no "plugin_version" symbol
The plugin 'irda.so' has no "plugin_version" symbol
The plugin 'wimaxmacphy.so' has no "plugin_version" symbol
The plugin 'mate.so' has no "plugin_version" symbol
The plugin 'opcua.so' has no "plugin_version" symbol
The plugin 'g726.so' has no "plugin_version" symbol
The plugin 'g722.so' has no "plugin_version" symbol
The plugin 'opus_dec.so' has no "plugin_version" symbol
The plugin 'g729.so' has no "plugin_version" symbol
The plugin 'l16mono.so' has no "plugin_version" symbol
The plugin 'g711.so' has no "plugin_version" symbol
The plugin 'usbdump.so' has no "plugin_version" symbol…
In the main window, it presents this message:
Unknown message from dumpcap reading header, try to show it as a string:
dyld[43838]: Library not loaded: @rpath/libwiretap.13.dylib
Referenced from: /nix/store/704a2hazgdwcnmjrrh38laiwg2yzzqkl-wireshark-qt-4.0.6/Applications/Wireshark.app/Contents/MacOS/.dumpcap-wrapped
Reason: tried: '/tmp/nix-build-wireshark-qt-4.0.6.drv-0/source/build/run/libwiretap.13.dylib' (no such file),
'/System/Volumes/Preboot/Cryptexes/OS/tmp/nix-build-wireshark-qt-4.0.6.drv-0/source/build/run/libwiretap.13.dylib' (no such file),
'/System/Library/Frameworks/libwiretap.13.dylib' (no such file, not in dyld cache),
'/System/Volumes/Preboot/Cryptexes/OS/System/Library/Frameworks/libwiretap.13.dylib' (no such file),
'/tmp/nix-build-wireshark-qt-4.0.6.drv-0/source/build/run/libwiretap.13.dylib' (no such file),
'/System/Volumes/Preboot/Cryptexes/OS/tmp/nix-build-wireshark-qt-4.0.6.drv-0/source/build/run/libwiretap.13.dylib' (no such file),
'/System/Library/Frameworks/libwiretap.13.dylib' (no such file, not in dyld cache),
'/System/Volumes/Preboot/Cryptexes/OS/System/Library/Frameworks/libwiretap.13.dylib' (no such file),
'/usr/local/lib/libwiretap.13.dylib' (no such file),
'/usr/lib/libwiretap.13.dylib' (no such file, not in dyld cache)
Child dumpcap process died: Abort
BTW, if you start Wireshark from terminal like this:
/run/current-system/Applications/Wireshark.app/Contents/MacOS/Wireshark
it will show error about plugins, but it wil start capturing packets but in terminal there are errors like:
dyld[36997]: Library not loaded: @rpath/libwsutil.14.dylib
Referenced from: <no uuid> /nix/store/xdzmi2f0lw0flgmf3r2h0bg2gxr5vmd1-wireshark-qt-4.0.10/Applications/Wireshark.app/Contents/MacOS/extcap/.wifidump-wrapped
Reason: tried: '/tmp/nix-build-wireshark-qt-4.0.10.drv-0/source/build/run/libwsutil.14.dylib' (no such file), '/System/Volumes/Preboot/Cryptexes/OS/tmp/nix-build-wireshark-qt-4.0.10.drv-0/source/build/run/libwsutil.14.dylib' (no such file), '/System/Library/Frameworks/libwsutil.14.dylib' (no such file, not in dyld cache), '/System/Volumes/Preboot/Cryptexes/OS/System/Library/Frameworks/libwsutil.14.dylib' (no such file), '/tmp/nix-build-wireshark-qt-4.0.10.drv-0/source/build/run/libwsutil.14.dylib' (no such file), '/System/Volumes/Preboot/Cryptexes/OS/tmp/nix-build-wireshark-qt-4.0.10.drv-0/source/build/run/libwsutil.14.dylib' (no such file), '/System/Library/Frameworks/libwsutil.14.dylib' (no such file, not in dyld cache), '/System/Volumes/Preboot/Cryptexes/OS/System/Library/Frameworks/libwsutil.14.dylib' (no such file), '/usr/local/lib/libwsutil.14.dylib' (no such file), '/usr/lib/libwsutil.14.dylib' (no such file, not in dyld cache)
dyld[36998]: Library not loaded: @rpath/libwiretap.13.dylib
Referenced from: <no uuid> /nix/store/xdzmi2f0lw0flgmf3r2h0bg2gxr5vmd1-wireshark-qt-4.0.10/Applications/Wireshark.app/Contents/MacOS/extcap/.androiddump-wrapped
Reason: tried: '/tmp/nix-build-wireshark-qt-4.0.10.drv-0/source/build/run/libwiretap.13.dylib' (no such file), '/System/Volumes/Preboot/Cryptexes/OS/tmp/nix-build-wireshark-qt-4.0.10.drv-0/source/build/run/libwiretap.13.dylib' (no such file), '/System/Library/Frameworks/libwiretap.13.dylib' (no such file, not in dyld cache), '/System/Volumes/Preboot/Cryptexes/OS/System/Library/Frameworks/libwiretap.13.dylib' (no such file), '/tmp/nix-build-wireshark-qt-4.0.10.drv-0/source/build/run/libwiretap.13.dylib' (no such file), '/System/Volumes/Preboot/Cryptexes/OS/tmp/nix-build-wireshark-qt-4.0.10.drv-0/source/build/run/libwiretap.13.dylib' (no such file), '/System/Library/Frameworks/libwiretap.13.dylib' (no such file, not in dyld cache), '/System/Volumes/Preboot/Cryptexes/OS/System/Library/Frameworks/libwiretap.13.dylib' (no such file), '/usr/local/lib/libwiretap.13.dylib' (no such file), '/usr/lib/libwiretap.13.dylib' (no such file, not in dyld cache)
I don't know if it can help somehow.
I installed wireshark on MacOS with
Now when I'm trying to start it from UI it's not starting UI and I need to close it with force quit. When I run it from bash with
-D
I see:So looks like it can't find lib directory.
MacOS version is Big Sur I'm junior nixpkgs user, so it's possible that I do something wrong. In this case can you please tell me what I need to do to make it working.