User Guide

Building and Installing Wireshark

is used by the libtool script to construct the final link command, this leads to mysterious problems. This

can be resolved by downloading a recent version of sed from http://directory.fsf.org/project/sed/.

If you cannot determine what the problems are, send an email to the wireshark-dev mailing list explaining

your problem, and including the output from config.log and anything else you think is relevant, like

a trace of the make stage.

2.7. Building from source under Windows

It is recommended to use the binary installer for Windows, until you want to start developing Wireshark

on the Windows platform.

For further information how to build Wireshark for Windows from the sources, have a look at the

Developer's Guide on the Documentation Page.

You may also want to have a look at the Development Wiki: http://wiki.wireshark.org/Development for

the latest available development documentation.

2.8. Installing Wireshark under Windows

In this section we explore installing Wireshark under Windows from the binary packages.

2.8.1. Install Wireshark

You may acquire a binary installer of Wireshark named something like: wireshark-

winxx-1.5.x.exe. The Wireshark installer includes WinPcap, so you don't need to download and

install two separate packages.

Simply download the Wireshark installer from: http://www.wireshark.org/download.html and execute it.

Beside the usual installer options like where to install the program, there are several optional components.

Tip: Just keep the defaults!

If you are unsure which settings to select, just keep the defaults.

2.8.1.1. "Choose Components" page

Wireshark

• Wireshark GTK - Wireshark is a GUI network protocol analyzer.

TShark - TShark is a command-line based network protocol analyzer.

Plugins / Extensions (for the Wireshark and TShark dissection engines):

• Dissector Plugins - Plugins with some extended dissections.

• Tree Statistics Plugins - Plugins with some extended statistics.

• Mate - Meta Analysis and Tracing Engine (experimental) - user configurable extension(s) of the

display filter engine, see http://wiki.wireshark.org/Mate for details.

• SNMP MIBs - SNMP MIBs for a more detailed SNMP dissection.