how to separate out tshark as separate project?
how to separate out tshark as separate project from available github repo of wireshark ?
Which files we need & how to build it ?
Asked: 2019-08-27 05:59:06 +0000
Seen: 153 times
Last updated: Aug 27 '19
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
Why would you want to do that? Building the project creates executables that makes it possible to deploy tshark only.
I want very reduce sized version of binary for tshark. Goal is it should parse only limited Protocols like enip/cip/profinet.
You are probably better off by editing the list of dissectors then.
Do you know how to configure things so that only tshark (& dumpcap) binary will get created ? (When I tried to execute tshark from different location then it doesn't executed & need dumpcap. That means we have to build tshark & dumpcap. right?)
To control your build feed the desired options to cmake, to configure the make files to build what you want. If you want to change the dissector content that is not directly supported. You'll have to go into the Cmake files themselves as commented before. You'll need tshark to dissect packets (on the CLI), you'll need dumpcap if you want to capture packets.