Run Wireshark on Mac OS X Mountain Lion

19 Jul

Apple has removed X11 from the Mountain Lion distribution.

If you were running Wireshark on Lion and upgraded to Mountain Lion, or installed Wireshark on a fresh copy of Mountain Lion, it will no longer run.

You can bring it back by following these steps:

  1. Uninstall Wireshark by trashing the bundle from your ~/Applications folder.
  2. Download the XQuartz installer from and run it.
  3. Restart.
  4. Download the latest Wireshark version and install it. Some posts on Stack Overflow suggest only older versions would run under Mountain Lion, but I cannot confirm this.
  5. On first install, Wireshark might pop up a dialog asking “Where is X11?”. Browse to ~/Applications/Utilities and select the bundle.

That’s it. You’re done. If this has helped you, I’d appreciate winning you as a new follower @ralf on Twitter.

3 replies
  1. akhil says:

    After I did what you said, a terminal like screen popped up with the prompt “bash-3.2$”. What does that mean? The standard wireshark screen isn’t opening.

  2. Profesor Yeow says:

    Thanks a lot !! I don’t know about the last step of select in Utilitys, you save me from a big headache jejeje now works. (I use mavericks)
    Regards !!!


Leave a Reply

Want to join the discussion?
Feel free to contribute!

Leave a Reply

Your email address will not be published. Required fields are marked *

© Copyright 2017 by Ralf Rottmann.