Ignore:
Timestamp:
01/30/2016 11:14:09 PM (9 years ago)
Author:
DJ Lucas <dj@…>
Branches:
systemd-13485
Children:
71c31f5
Parents:
b91aa96
Message:

Merge Chapter 16 from trunk.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/branches/systemd@16879 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:
1 edited

Legend:

Unmodified
Added
Removed
  • networking/netutils/wireshark.xml

    rb91aa96 r027c7d7  
    77  <!ENTITY wireshark-download-http "https://www.wireshark.org/download/src/all-versions/wireshark-&wireshark-version;.tar.bz2">
    88  <!ENTITY wireshark-download-ftp  "ftp://ftp.uni-kl.de/pub/wireshark/src/wireshark-&wireshark-version;.tar.bz2">
    9   <!ENTITY wireshark-md5sum        "25ad2bc1c2a21396827c238fcff51bf3">
    10   <!ENTITY wireshark-size          "28 MB">
    11   <!ENTITY wireshark-buildsize     "1.6 GB">
    12   <!ENTITY wireshark-time          "6.0 SBU">
     9  <!ENTITY wireshark-md5sum        "c1610ab2238965363b811e5188750fb1">
     10  <!ENTITY wireshark-size          "30 MB">
     11  <!ENTITY wireshark-buildsize     "2 GB, with default GUI front-ends">
     12  <!ENTITY wireshark-time          "8.1 SBU, with default GUI front-ends">
    1313]>
    1414
     
    4444    </para>
    4545
    46     &lfs77_checked;
     46    &lfs78_checked;
    4747
    4848    <bridgehead renderas="sect3">Package Information</bridgehead>
     
    7070    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
    7171    <itemizedlist spacing="compact">
     72      <listitem>
     73        <para>
     74          Optional patch:
     75          <ulink url=
     76              "&patch-root;/wireshark-&wireshark-version;-lua_5_3_1-1.patch"/>
     77          (allows building the LUA bindings if <xref linkend="lua"/> is
     78          installed and LUA is not disabled by passing <option>--without-lua
     79          </option> to <command>configure</command>)
     80        </para>
     81      </listitem>
    7282      <listitem>
    7383        <para>
    7484          Additional Documentation:
    7585          <ulink url="https://www.wireshark.org/download/docs/"/>
    76           (contains links to docs in a variety of formats)
     86          (contains links to several different docs in a variety of formats)
    7787         </para>
    7888      </listitem>
    7989    </itemizedlist>
     90
    8091    <bridgehead renderas="sect3">Wireshark dependencies</bridgehead>
    8192
     
    8798    <bridgehead renderas="sect4">Recommended</bridgehead>
    8899    <para role="recommended">
    89       <xref linkend="gtk3"/> (to build the <application>GTK+3</application>
    90       GUI) and
    91       <xref linkend="libpcap"/> (required to capture data)
     100      <xref linkend="gtk3"/> (for the <application>Gtk+3</application> GUI),
     101      <xref linkend="libpcap"/> (required to capture data), and
     102      <xref linkend="qt5"/> (for the <application>Qt5</application> GUI)
    92103    </para>
    93104
     
    96107      <xref linkend="gnutls"/>,
    97108      <xref linkend="libgcrypt"/>,
     109      <xref linkend="libnl"/>,
    98110      <xref linkend="lua"/>,
    99111      <xref linkend="mitkrb"/>,
    100112      <xref linkend="openssl"/>,
     113      <xref linkend="sbc"/>,
    101114      <ulink url="http://www.gnu.org/software/adns/adns.html">adns</ulink>,
     115      <ulink url="http://c-ares.haxx.se/">c-ares</ulink>,
     116      <ulink url="http://www.ibr.cs.tu-bs.de/projects/libsmi/">libsmi</ulink>,
    102117      <ulink url="http://www.maxmind.com/app/c">GeoIP</ulink>, and
    103       <ulink url="http://www.portaudio.com/download.html">PortAudio</ulink>
    104     </para>
    105 
    106     <bridgehead renderas="sect4">Optional (to build different GUI front-ends)</bridgehead>
     118      <ulink url="http://www.portaudio.com/">PortAudio</ulink>
     119      (for GTK+ RTP player)
     120    </para>
     121
     122    <bridgehead renderas="sect4">Optional (for GUI front-ends)
     123    </bridgehead>
    107124    <para role="optional">
    108       <xref linkend="gtk2"/> and
    109       <xref linkend="qt4"/> or
    110       <xref linkend="qt5"/>
    111     </para>
     125      <xref linkend="gtk2"/>, or
     126      <xref linkend="qt4"/>,
     127    </para>
     128
     129    <note>
     130      <para>
     131        The <application>GTK+</application> GUI needs one of <xref linkend=
     132        "gtk2"/> or <xref linkend="gtk3"/>. If both are installed, GTK+3
     133        is used by default.
     134      </para>
     135
     136      <para>
     137        The <application>Qt</application> GUI needs one of <xref linkend=
     138        "qt4"/> or <xref linkend="qt5"/>. If both are installed, Qt5
     139        is used by default.
     140      </para>
     141
     142      <para>
     143        Both GTK+ and Qt GUI front-ends are built, as recommended by the
     144        upstream developers.  If you want to override the defaults, some
     145        configure switches have to be set (see <quote>Command
     146        Explanations</quote>).
     147      </para>
     148    </note>
    112149
    113150    <para condition="html" role="usernotes">
    114151      User Notes: <ulink url="&blfs-wiki;/wireshark"/>
    115152    </para>
     153
    116154  </sect2>
    117155
     
    123161      Wireshark</application> to capture live packets from the network:
    124162    </para>
    125      
     163
    126164<screen><literal>[*] Networking support ---&gt;          [CONFIG_NET]
    127165      Networking options ---&gt;
    128166        &lt;*/M&gt; Packet socket          [CONFIG_PACKET]</literal></screen>
     167
     168    <para>
     169      If built as a module, the name is <filename>af_packet.ko</filename>.
     170    </para>
    129171
    130172    <indexterm zone="wireshark wireshark-kernel">
     
    140182
    141183    <para>
    142       Optionally, fix the description of the program in the title.
    143       The first change overwrites the default <quote>SVN Unknown</quote> in
    144       the title and the second overwrites a utility script that resets the
    145       version to <quote>unknown</quote>.
    146     </para>
    147 
    148 <screen><userinput>cat > svnversion.h &lt;&lt; "EOF" &amp;&amp;
    149 #define SVNVERSION "BLFS"
    150 #define SVNPATH "source"
    151 EOF
    152 
    153 cat > make-version.pl &lt;&lt; "EOF"
    154 <literal>#!/usr/bin/perl</literal>
    155 EOF</userinput></screen>
    156 
    157     <para>
    158184      <application>Wireshark</application> is a very large and complex
    159185      application. These instructions provide additional security measures to
     
    166192
    167193    <para>
    168       If you have both <application>GTK+2</application> and
    169       <application>GTK+3</application>, and both <application>Qt4</application>
    170       and <application>Qt5</application> installed, the
    171       <application>GTK+</application> GUI will be linked against
    172       <application>GTK+3</application> and <application>Qt</application> GUI
    173       will be linked against <application>Qt5</application>. The instructions
    174       below only cover building of the <application>GTK+3</application> GUI.
    175       Additional modifications must be made to the commands below if building
    176       a GUI front-end against different supported toolkits. Examine "Command
    177       Explanations" section for information on necessary modifications to the
    178       <command>configure</command> command.
    179     </para>
    180 
    181     <para>
    182       If you want to build the <application>Qt5</application> GUI and have both
    183       <application>Qt4</application> and <application>Qt5</application>
    184       installed, issue:
    185     </para>
    186 
    187 <screen><userinput>sed -i "s:moc;:moc-qt5;:g" configure &amp;&amp;
    188 sed -i "s:uic;:uic-qt5;:g" configure &amp;&amp;
    189 sed -i "s:(AM_V_RCC)rcc:&amp;-qt5:g" ui/qt/Makefile.in</userinput></screen>
    190 
    191     <para>
    192       If you want to build the <application>Qt4</application> GUI and have both
    193       <application>Qt4</application> and <application>Qt5</application>
    194       installed, issue:
    195     </para>
    196 
    197 <screen><userinput>sed -i "s:Qt5 Qt:Qt:g" configure     &amp;&amp;
    198 sed -i "s:moc;:moc-qt4;:g" configure &amp;&amp;
    199 sed -i "s:uic;:uic-qt4;:g" configure &amp;&amp;
    200 sed -i "s:(AM_V_RCC)rcc:&amp;-qt4:g" ui/qt/Makefile.in</userinput></screen>
    201 
    202     <para>
    203       Install <application>Wireshark</application> by running the following
    204       commands:
    205     </para>
    206 
    207 <screen><userinput>./configure --prefix=/usr     \
    208             --sysconfdir=/etc \
    209             --with-gtk3       \
    210             --without-qt      &amp;&amp;
     194      Continue to install <application>Wireshark</application> by running
     195      the following commands:
     196    </para>
     197
     198<screen><userinput>patch -Np1 -i ../wireshark-&wireshark-version;-lua_5_3_1-1.patch  &amp;&amp;
     199
     200./configure --prefix=/usr --sysconfdir=/etc &amp;&amp;
     201
    211202make</userinput></screen>
    212203
     
    221212<screen role="root"><userinput>make install &amp;&amp;
    222213
    223 install -v -dm755 /usr/share/doc/wireshark-&wireshark-version; &amp;&amp;
    224 install -v -m644  README{,.linux} doc/README.* doc/*.{pod,txt} \
    225                   /usr/share/doc/wireshark-&wireshark-version; &amp;&amp;
     214install -v -m755 -d /usr/share/doc/wireshark-&wireshark-version; &amp;&amp;
     215install -v -m644    README{,.linux} doc/README.* doc/*.{pod,txt} \
     216                    /usr/share/doc/wireshark-&wireshark-version; &amp;&amp;
    226217
    227218pushd /usr/share/doc/wireshark-&wireshark-version; &amp;&amp;
    228219   for FILENAME in ../../wireshark/*.html; do
    229       ln -sfv $FILENAME
     220      ln -s -v -f $FILENAME .
    230221   done &amp;&amp;
    231 popd &amp;&amp;
    232 
    233 if [ -e /usr/bin/wireshark ]; then
    234    install -v -Dm644 wireshark.desktop /usr/share/applications/wireshark.desktop
    235 fi &amp;&amp;
    236 
    237 if [ -e /usr/bin/wireshark-qt ]; then
    238    install -v -Dm644 wireshark.desktop /usr/share/applications/wireshark-qt.desktop &amp;&amp;
    239    sed -i "s:Exec.*wireshark:&amp;-qt:g" /usr/share/applications/wireshark-qt.desktop   &amp;&amp;
    240    sed -i "s:Name.*Wireshark:&amp; (Qt):g" /usr/share/applications/wireshark-qt.desktop
    241 fi &amp;&amp;
    242 
    243 for size in 16 24 32 48 64 128 256 ; do
    244     install -v -Dm644 image/wsicon${size}.png \
    245                       /usr/share/icons/hicolor/${size}x${size}/apps/wireshark.png &amp;&amp;
    246     install -v -Dm644 image/WiresharkDoc-${size}.png \
    247                       /usr/share/icons/hicolor/${size}x${size}/mimetypes/application-vnd.tcpdump.pcap.png
    248 done &amp;&amp;
    249 
    250 unset size</userinput></screen>
     222popd
     223unset FILENAME</userinput></screen>
    251224
    252225    <para>
     
    257230    </para>
    258231
    259 <screen role="root"><userinput>install -v -m644 <replaceable>&lt;Downloaded_Files&gt;</replaceable> /usr/share/doc/wireshark-&wireshark-version;</userinput></screen>
     232<screen role="root"><userinput>install -v -m644 <replaceable>&lt;Downloaded_Files&gt;</replaceable> \
     233                 /usr/share/doc/wireshark-&wireshark-version;</userinput></screen>
    260234
    261235    <para>
     
    275249<screen role="root"><userinput>usermod -a -G wireshark &lt;username&gt;</userinput></screen>
    276250
     251    <para>
     252      If you are installing wireshark for the first time, it will be necessary
     253      to leave the session and login again, thus you will now have wireshark
     254      between your groups, otherwise, it will not run properly.
     255    </para>
     256
    277257  </sect2>
    278258
     
    281261
    282262    <para>
    283       <parameter>--with-gtk3</parameter>: This switch enables building
    284       of the <application>GTK+3</application> GUI front-end. Replace it
    285       with <parameter>--with-gtk2</parameter> if you have both
    286       <application>GTK+2</application> and <application>GTK+3</application>
    287       installed but wish to use <application>GTK+2</application> to build
    288       the GUI front-end.
    289     </para>
    290 
    291     <para>
    292       <parameter>--without-qt</parameter>: This switch disables building
    293       of the <application>Qt</application> GUI front-end. Replace it with
    294       <parameter>--with-qt</parameter> if you have installed either
    295       <application>Qt4</application> or <application>Qt5</application>
    296       and wish to build the <application>Qt</application> GUI front-end.
    297     </para>
    298 
    299     <para>
    300       <option>--disable-wireshark</option>: Use this switch if you don't
    301       want to build the GUI front-end.
     263      <option>--with-gtk2=[yes/no]</option>: For the Gtk+2 GUI. If both Gtk+2
     264      and 3 are installed, default is no. Notice that the GUI for only one Gtk+
     265      version (either 2 or 3) can be built.
     266    </para>
     267
     268    <para>
     269      <option>--with-gtk3=[yes/no]</option>: For the Gtk+3 GUI. If both Gtk+2
     270      and 3 are installed, default is yes.
     271    </para>
     272
     273    <para>
     274      <option>--with-qt=[yes/no/4/5]</option>: For the Qt GUI. Default is yes.
     275      If both Qt4 and 5 are installed, Qt5 is chosen by default. Notice that the
     276      GUI for only one Qt version (either 4 or 5) can be built.
     277    </para>
     278
     279    <para>
     280      <option>--disable-wireshark</option>: Use this switch if you
     281      have <application>GTK+</application> installed but do not want to build
     282      any of the GUIs.
    302283    </para>
    303284
     
    311292
    312293      <para><filename>/etc/wireshark.conf</filename> and
    313       <filename>~/.wireshark/*</filename></para>
     294      <filename>~/.config/wireshark/*</filename> (unless there is already
     295      <filename>~/.wireshark/*</filename> in the system)</para>
    314296
    315297      <indexterm zone="wireshark wireshark-config">
     
    326308      <title>Configuration Information</title>
    327309
    328       <para>Though the default configuration parameters are very sane,
    329       reference the configuration section of the
    330       <ulink url="http://www.wireshark.org/docs/wsug_html/">Wireshark User's
     310      <para>Though the default configuration parameters are very sane, reference
     311      the configuration section of the <ulink
     312      url="http://www.wireshark.org/docs/wsug_html/">Wireshark User's
    331313      Guide</ulink> for configuration information. Most of
    332314      <application>Wireshark</application>'s configuration can be accomplished
    333       using the menu options of the <command>wireshark</command>
    334       graphical interfaces.</para>
     315      using the menu options of the <command>wireshark</command> graphical
     316      interfaces.</para>
    335317
    336318      <note>
    337         <para>If you want to look at packets, make sure you don't filter
    338         them out with <xref linkend="iptables"/>. If you want to exclude
    339         certain classes of packets, it is more efficient to do it with
     319        <para>If you want to look at packets, make sure you don't filter them
     320        out with <xref linkend="iptables"/>. If you want to exclude certain
     321        classes of packets, it is more efficient to do it with
    340322        <application>iptables</application> than it is with
    341323        <application>Wireshark</application>.</para>
     
    356338      <seglistitem>
    357339        <seg>
    358           capinfos, captype, dftest, dumpcap, editcap, mergecap,
    359           randpkt, rawshark, reordercap, text2pcap, tshark,
    360           wireshark and wireshark-qt
     340          androiddump, capinfos, captype, dftest, dumpcap, editcap, idl2wrs,
     341          mergecap, randpkt, rawshark, reordercap, text2pcap, tshark, wireshark,
     342          and wireshark-gtk
    361343        </seg>
    362344        <seg>
    363           libfiletap.so, libwireshark.so, libwiretap.so and libwsutil.so
     345          libwireshark.so, libwiretap.so, libwsutil.so, and numerous modules
     346          under /usr/lib/wireshark/plugins
    364347        </seg>
    365348        <seg>
    366           /usr/lib/wireshark,
    367           /usr/share/doc/wireshark-&wireshark-version;,
    368           /usr/share/pixmaps/wireshark and
    369           /usr/share/wireshark
    370         </seg>
     349          /usr/{lib,share}/wireshark and
     350          /usr/share/doc/wireshark-&wireshark-version;
     351         </seg>
    371352      </seglistitem>
    372353    </segmentedlist>
     
    502483        <term><command>wireshark</command></term>
    503484        <listitem>
    504           <para>is the GTK+ GUI network protocol analyzer. It lets you
    505           interactively browse packet data from a live network or from a
    506           previously saved capture file.</para>
     485          <para>
     486            is the Qt GUI network protocol analyzer. It lets you interactively
     487            browse packet data from a live network or from a previously saved
     488            capture file.
     489          </para>
    507490          <indexterm zone="wireshark wireshark-prog">
    508491            <primary sortas="b-wireshark">wireshark</primary>
     
    511494      </varlistentry>
    512495
    513       <varlistentry id="wireshark-qt-prog">
    514         <term><command>wireshark-qt</command></term>
    515         <listitem>
    516           <para>is the Qt GUI network protocol analyzer. It lets you
    517           interactively browse packet data from a live network or from a
    518           previously saved capture file.</para>
    519           <indexterm zone="wireshark wireshark-qt-prog">
    520             <primary sortas="b-wireshark-qt">wireshark-qt</primary>
     496      <varlistentry id="wireshark-gtk-prog">
     497        <term><command>wireshark-gtk</command></term>
     498        <listitem>
     499          <para>
     500            is the Gtk+ GUI network protocol analyzer. It lets you interactively
     501            browse packet data from a live network or from a previously saved
     502            capture file.
     503          </para>
     504          <indexterm zone="wireshark wireshark-gtk-prog">
     505            <primary sortas="b-wireshark-gtk">wireshark-gtk</primary>
    521506          </indexterm>
    522507        </listitem>
     
    524509
    525510      <varlistentry id="libwireshark">
    526         <term><filename class="libraryfile">libwireshark.so</filename></term>
     511        <term><filename class='libraryfile'>libwireshark.so</filename></term>
    527512        <listitem>
    528513          <para>contains functions used by the
     
    536521
    537522      <varlistentry id="libwiretap">
    538         <term><filename class="libraryfile">libwiretap.so</filename></term>
     523        <term><filename class='libraryfile'>libwiretap.so</filename></term>
    539524        <listitem>
    540525          <para>is a library being developed as a future replacement for
    541           <filename class="libraryfile">libpcap</filename>, the current
     526          <filename class='libraryfile'>libpcap</filename>, the current
    542527          standard Unix library for packet capturing. For more information,
    543528          see the <filename>README</filename> file in the source
    544           <filename class="directory">wiretap</filename> directory.</para>
     529          <filename class='directory'>wiretap</filename> directory.</para>
    545530          <indexterm zone="wireshark libwiretap">
    546531            <primary sortas="c-libwiretap">libwiretap.so</primary>
Note: See TracChangeset for help on using the changeset viewer.