Mark R Lindsey

Fixed: Wireshark crash on 10.6

In Uncategorized on April 2, 2010 at 7:13 pm

I've had problems for a while with Wireshark crashes on Mac OS X 10.6 (“Snow Leopard”). I finally tracked it down today.

1. Install XCode

2. Use this dtrace one-liner to watch all the files being opened on the machine:
dtrace -n 'syscall::open*:entry { printf(“%s %s”,execname,copyinstr(arg0)); }'

3. Found where “CrashReport” ran in the output, and then looked back from there to see what files had been opened. I identified these files, and removed them:

(For you Finder users, these are all hidden files in my home directory.)

One of those must have had something bogus in it, because wireshark started up the next time.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: