It seems that there are issues about XServer or gdk (I don't know), so wireshark will not work in xfce through VNC.

Here is the error message. (I am using a non-root user, but there's same error for root. The system is Xiaomi 8, using arm64, kernel is not modified)

mi8@kali:~$ /usr/bin/wireshark
qt.qpa.xcb: XKeyboard extension not present on the X server
QStandardPaths: XDG_RUNTIME_DIR not set, defaulting to '/tmp/runtime-mi8'
Gdk-Message: 02:16:28.194: wireshark: Fatal IO error 2 (No such file or directory) on X server :5.0.

Any one can help with this? Thanks.