A network analyzer that lets you capture and interactively browse the
contents of packets from a variety of network interface types. Packet data can
be read from a file, or live from a local network interface.
===> The following configuration options are available for tshark-4.0.1:
ANDROIDDUMP=off: Build androiddump extcap tool
CISCODUMP=off: Build ciscodump extcap tool
DECRYPT=on: Decryption support for SSL and IPSec
LTO=off: Use Link-Time Optimization
LUA=off: Lua scripting language support
MAXMIND=on: Enable MaxMindDB-based GeoIP geolocation support
OPUS=off: Build opus decoder plugin
RTP=off: Enable support for playing back RTP streams
SNMP=on: SNMP network protocol support
SSHDUMP=off: Build sshdump extcap tool
WIFIDUMP=off: Build wifidump extcap tool
====> Kerberos dissection support: you have to select exactly one of them
GSSAPI_BASE=on: Kerberos support via base system
GSSAPI_HEIMDAL=off: Kerberos support via security/heimdal
GSSAPI_MIT=off: Kerberos support via security/krb5
GSSAPI_NONE=off: Disable Kerberos support
===> Use 'make config' to modify these settings
In order for wireshark be able to capture packets when used by unprivileged
user, /dev/bpf should be in network group and have read-write permissions.
For example:
# chgrp network /dev/bpf*
# chmod g+r /dev/bpf*
# chmod g+w /dev/bpf*
In order for this to persist across reboots, add the following to
/etc/devfs.conf:
own bpf* root:network
perm bpf* 0660