Building fast-wireshark

[miken]

Hi all,

Thanks for putting in all of the effort to develop this dissector for
Wireshark!

Is this project still active? I'm currently trying to build the plugin
but having a world of issues. I have built both wireshark 1.4.6 and
1.6.7 and tried to follow as best I could both the fast-wireshark and
regular wireshark directions for building a plugin with no luck at
all.

In terms of the fast-wireshark instructions after building wireshark
successfully on RHEL5 I have created symlink to a svn checkout of fast-
wireshark source into the wireshark/plugins directory of the wireshark
source tree and then run install.sh from the fast-wireshark source
tree because I do not have any $HOME/.wireshark/install.sh as
described in the README.nix

tar jxf wireshark-1.6.7.tar.bz2
cd wireshark-1.6.7
./configure
make
make install
cd plugins
ln -s /location/of/fast-wireshark-read-only fast
cd fast
./install.sh

CMake Error at CMakeLists.txt:94 (find_package):
Could not find module FindGLIB2.cmake or a configuration file for
package
GLIB2.

Adjust CMAKE_MODULE_PATH to find FindGLIB2.cmake or set GLIB2_DIR to
the
directory containing a CMake configuration file for GLIB2. The file
will
have one of the following names:

GLIB2Config.cmake
glib2-config.cmake


Any help would be greatly appreciated.

[Wes Fournier]

I haven't personally worked on fast-wireshark in some time but I may be able to help.

It looks like CMake does not have a finder installed for glib. Do you have an up-to-date version of cmake? If updating doesn't help, you may need to find a FindGLIB2.cmake finder file for CMake online, and add it to CMake's module folder (usually these are stored in /usr/share/cmake*/Modules). I'm not sure why glib wouldn't be included in cmake's preinstalled modules, though...

Wes

[Michael Ngarimu]

Wes,

Thanks heaps. What was also a problem was the relative locations where I placed wireshark and fast-wireshark source. Turns out fast-wireshark expects ../wireshark to be the witeshark source tree. 

Thanks for your help. 

-- 

Michael Ngarimu

Sent from a mobile device. Please excuse any typographical or grammatical errors.

[vikram patil]

Can you explain your last line. I'm building fast wireshark but it was giving errors(it can not find header files of wireshark).

[vikram patil]

If I get it right your saying that copy Fast wireshark into wireshark level.

[Michael Ngarimu]

Honestly this was so long ago I remember very well. I think fast wireshark has a directory called wireshark somewhere near the top level. I think it expects that to contain the wireshark source tree. 

-- 

Michael 

Sent from a mobile device. Please excuse any typographical and/or grammatical errors. 

--
You received this message because you are subscribed to the Google Groups "fast-wireshark-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fast-wireshark-di...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[vikram patil]

Thanks for Information.
I was able to install wireshark and FAST plugin but when I start wireshark it does not show FAST plugin. Is version of FAST, wireshark has to be specific. currently I'm using wireshark(2.0.3) and FAST(https://github.com/sm1ly/fast-wireshark).

To unsubscribe from this group and stop receiving emails from it, send an email to fast-wireshark-discuss+unsub...@googlegroups.com.

[Michael Ngarimu]

There are version requirements but I'm sorry I really don't remember what they were. Pretty sure though that the plugin will only work with the version of wireshark against which it was built. So you can't just take the .so and run it against the default version of wireshark thats running on.your system from the distribution.  

-- 

Michael Ngarimu

Sent from a mobile device. Please excuse any typographical and/or grammatical errors. 

To unsubscribe from this group and stop receiving emails from it, send an email to fast-wireshark-di...@googlegroups.com.

[vikram patil]

Ok, can you tell me your OS on which you've build plugin and any other tool to analyze FAST packet other than this.
Thank you

[Michael Ngarimu]

Different versions of Linux. I cannot remember the exact versions. This was a number of years ago now. 

-- 

Michael Ngarimu

Sent from a mobile device. Please excuse any typographical and/or grammatical errors. 

To unsubscribe from this group and stop receiving emails from it, send an email to fast-wireshark-di...@googlegroups.com.

[vikram patil]

ok