I built 2.6.4 (trying to recreate some issue) on a pi:
Hardware : BCM2835
Revision : a22082
Serial : 00000000c73d07a3
Model : Raspberry Pi 3 Model B Rev 1.2
- 3.4. Obtaining The Wireshark Sources - the easiest way is to download the tarball (step 3.4.3)
- Extract then head to the
tools directory and look for tools/debian-setup.sh
(see 2.1. UNIX: Installation and Build Instructions)
It will try to pull in the dependencies needed for the build.
- 2.1.2. Building - first time I tried
ninja which overloaded the pi. Redid the build with make and it completed. Don't use ninja on the pi
People have asked about just building tshark but so much of the Wireshark build is libraries and dissectors shared by tshark and wireshark that there isn't much saved by not building the gui part.
pi@raspberrypi:~/wireshark_build/wireshark-make/run $ ./tshark -v
TShark (Wireshark) 2.6.4 (v2.6.4)
Copyright 1998-2018 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later <http: www.gnu.org="" licenses="" old-licenses="" gpl-2.0.html="">
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with libpcap, with POSIX capabilities (Linux), with libnl 3,
with GLib 2.58.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.14.0, with Lua
5.2.4, with GnuTLS 3.6.7, with Gcrypt 1.8.4, with MIT Kerberos, with MaxMind DB
resolver, with nghttp2 1.36.0, with LZ4, with Snappy, with libxml2 2.9.4.
Running on Linux 4.19.118-v7+, with 926 MB of physical memory, with locale
en_US.UTF-8, with libpcap version 1.8.1, with GnuTLS 3.6.7, with Gcrypt 1.8.4,
with zlib 1.2.11, binary plugins supported (13 loaded).
Built using gcc 8.3.0.
pi@raspberrypi:~/wireshark_build/wireshark-make/run $
You can use tcpdump on the PI and export the PCAP file elsewhere.
Thanks @hugo.vanderkooji that may be an ok backup plan. I also found another workaround where I can use an arm32v5 based docker image and it seems to work. My application can grab the capture and send it somewhere else or it could also do a bit of simple analysis locally, in this case I use the tshark wrapper
pysharkpython package.