User Guide

Building and Installing Wireshark

You should consult the GTK+ web site if any errors occur in carrying out the instructions in Example 2.1,

“Building GTK+ from source”.

If you have downloaded the source to libpcap, the general instructions shown in Example 2.2, “Building

and installing libpcap” will assist in building it. Also, if your operating system does not support tcpdump,

you might also want to download it from the tcpdump web site and install it.

Example 2.2. Building and installing libpcap

gzip -dc libpcap-1.0.0.tar.Z | tar xvf -

cd libpcap-1.0.0

./configure

make

make install

Note!

The directory you should change to will depend on the version of libpcap you have

downloaded. In all cases, tar xvf - will show you the name of the directory that has been

unpacked.

Under Red Hat 6.x and beyond (and distributions based on it, like Mandrake) you can simply install each of

the packages you need from RPMs. Most Linux systems will install GTK+ and GLib in any case, however

you will probably need to install the devel versions of each of these packages. The commands shown in

Example 2.3, “ Installing required RPMs under Red Hat Linux 6.2 and beyond ” will install all the needed

RPMs if they are not already installed.

Example 2.3. Installing required RPMs under Red Hat Linux 6.2 and beyond

cd /mnt/cdrom/RedHat/RPMS

rpm -ivh glib-1.2.6-3.i386.rpm

rpm -ivh glib-devel-1.2.6-3.i386.rpm

rpm -ivh gtk+-1.2.6-7.i386.rpm

rpm -ivh gtk+-devel-1.2.6-7.i386.rpm

rpm -ivh libpcap-0.4-19.i386.rpm

Note

If you are using a version of Red Hat later than 6.2, the required RPMs have most likely

changed. Simply use the correct RPMs from your distribution.

Under Debian you can install Wireshark using aptitude. aptitude will handle any dependency issues for

you. Example 2.4, “Installing debs under Debian, Ubuntu and other Debian derivatives” shows how to

do this.

Example 2.4. Installing debs under Debian, Ubuntu and other Debian derivatives

aptitude install wireshark-dev