A network analyzer that lets you capture and interactively browse the
contents of packets from a variety of network interface types. Packet data can
be read from a file, or live from a local network interface.
===> The following configuration options are available for wireshark-4.6.9:
ANDROIDDUMP=on: Build androiddump extcap tool
DEVELOPMENT=on: Install development headers and support files
DOCS=on: Build and/or install documentation
GNUTLS=on: Enable crypto support for SSL and IPSec via GnuTLS
GUI=on: Enable Qt 6 based Wireshark GUI
LIBSSH=off: Enable libssh support (req by cisco/ssh/wifidump)
LTO=on: Use Link-Time Optimization
LUA=off: Lua scripting language support
MANPAGES=on: Build and/or install manual pages
MAXMIND=on: Enable MaxMindDB-based GeoIP geolocation support
RTP=on: Enable codec support for RTP streams (implies GUI)
SNMP=on: SNMP network protocol support
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
GSSAPI_HEIMDAL=off: GSSAPI support via security/heimdal
GSSAPI_MIT=off: GSSAPI support via security/krb5
GSSAPI_NONE=off: Disable GSSAPI support
===> Use 'make config' to modify these settings
In order for wireshark be able to capture packets when used by unprivileged
user, /dev/bpf should be in network group and have read-write permissions.
For example:
# chgrp network /dev/bpf*
# chmod g+r /dev/bpf*
# chmod g+w /dev/bpf*
In order for this to persist across reboots, add the following to
/etc/devfs.conf:
own bpf* root:network
perm bpf* 0660