Recently we received some dissector plugins for Wireshark version 1.8.x, which is not available to install through the repositories.
So, we had to install it ourselves and we decided to use version 1.8.8 that was the latest version of the 1.8.x series available in the following FedoraProject.org page.
The source code is available at https://www.wireshark.org/download/src/all-versions/ and http://pkgs.fedoraproject.org/repo/pkgs/wireshark/.
Download the patched version here: [download id=”3443″]
Synopsis
While configuring we run into a few problems, that we solved by installing the following packages:
sudo dnf install perl-podlators perl-Pod-Html gtk2-devel gtk3-devel libpcap-devel byacc flex -y;
When compiling we run into an error where an a wireshark enum was conflicting with a system one.
To resolve that issue we modified the file: epan/dissectors/packet-gluster.h and at line 357 we removed the next enum:
/* dir-entry types from libglusterfs/src/compat.h */
enum gluster_entry_types {
DT_UNKNOWN = 0,
DT_FIFO = 1,
DT_CHR = 2,
DT_DIR = 4,
DT_BLK = 6,
DT_REG = 8,
DT_LNK = 10,
DT_SOCK = 12,
DT_WHT = 14
};
It is safe to delete it as it exists in the exact same form and same values in the system header files.
Please note that in version 1.8.15 we found the following enum, which shows that it was decided later on to just change the enum fields.
/* dir-entry types from libglusterfs/src/compat.h */
enum gluster_entry_types {
GLUSTER_DT_UNKNOWN = 0,
GLUSTER_DT_FIFO = 1,
GLUSTER_DT_CHR = 2,
GLUSTER_DT_DIR = 4,
GLUSTER_DT_BLK = 6,
GLUSTER_DT_REG = 8,
GLUSTER_DT_LNK = 10,
GLUSTER_DT_SOCK = 12,
GLUSTER_DT_WHT = 14
};
Later during compilation we got the error that there was an undefined reference to g_memmove, we copied the definition of g_memmove (see below) from packaging/macosx/native-gtk/glibconfig.h at line 81 and pasted it on the first line of the files ui/gtk/export_object_smb.c and epan/dissectors/packet-ssl-utils.c.
#define g_memmove(dest,src,len) G_STMT_START { memmove ((dest), (src), (len)); } G_STMT_END
Finally during documentation generation we had a problem with two authors that there were Non-ASCII characters in their names so we updated the file AUTHORS and replaced the names Peter Kovář with Peter Kovar and Роман Донченко with Roman Donchenko which are strings that only contain ASCII characters.
Download the patched version here: [download id=”3443″]
The Problems One by One
checking for pod2man... /usr/bin/pod2man checking for pod2html... no configure: error: I couldn't find pod2html; make sure it's installed and in your path
Solution: sudo dnf install perl-podlators perl-Pod-Html;
checking for GTK+ - version >= 2.12.0 and < 3.0... Package gtk+-2.0 was not found in the pkg-config search path. Perhaps you should add the directory containing `gtk+-2.0.pc' to the PKG_CONFIG_PATH environment variable No package 'gtk+-2.0' found no *** Could not run GTK+ test program, checking why... *** The test program failed to compile or link. See the file config.log for the *** exact error that occured. This usually means GTK+ is incorrectly installed. configure: error: Neither Qt nor GTK+ 2.12 or later are available, so Wireshark can't be compiled
Solution: sudo dnf install gtk2-devel gtk3-devel;
checking for pcap-config... no checking for extraneous pcap header directories... not found checking pcap.h usability... no checking pcap.h presence... no checking for pcap.h... no configure: error: Header file pcap.h not found; if you installed libpcap from source, did you also do "make install-incl", and if you installed a binary package of libpcap, is there also a developer's package of libpcap, and did you also install that package?
Solution: sudo dnf install libpcap-devel;
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I./../.. -I./.. -DINET6 -DG_DISABLE_DEPRECATED -DG_DISABLE_SINGLE_INCLUDES -DGSEAL_ENABLE -DGTK_DISABLE_DEPRECATED -DGTK_DISABLE_SINGLE_INCLUDES -D_FORTIFY_SOURCE=2 "-D_U_=__attribute__((unused))" -I/usr/local/include -DPLUGIN_DIR=\"/usr/local/lib/wireshark/plugins/1.8.8\" -g -O2 -Wall -W -Wextra -Wdeclaration-after-statement -Wendif-labels -Wpointer-arith -Wno-pointer-sign -Warray-bounds -Wcast-align -Wformat-security -Wold-style-definition -Wno-error=unused-but-set-variable -fexcess-precision=fast -pthread -I/usr/include/gtk-2.0 -I/usr/lib64/gtk-2.0/include -I/usr/include/pango-1.0 -I/usr/include/atk-1.0 -I/usr/include/cairo -I/usr/include/pixman-1 -I/usr/include/libdrm -I/usr/include/gdk-pixbuf-2.0 -I/usr/include/libpng16 -I/usr/include/pango-1.0 -I/usr/include/harfbuzz -I/usr/include/pango-1.0 -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -I/usr/include/freetype2 -I/usr/include/libpng16 -I/usr/include/freetype2 -I/usr/include/libpng16 -MT libdissectors_la-packet-gluster_cli.lo -MD -MP -MF .deps/libdissectors_la-packet-gluster_cli.Tpo -c packet-gluster_cli.c -fPIC -DPIC -o .libs/libdissectors_la-packet-gluster_cli.o In file included from /usr/include/glib-2.0/glib/gdir.h:32:0, from /usr/include/glib-2.0/glib.h:45, from packet-gluster_cli.c:40: packet-gluster.h:359:2: error: redeclaration of enumerator 'DT_UNKNOWN' DT_UNKNOWN = 0, ^ /usr/include/dirent.h:99:5: note: previous definition of 'DT_UNKNOWN' was here DT_UNKNOWN = 0, ^~~~~~~~~~ packet-gluster.h:360:2: error: redeclaration of enumerator 'DT_FIFO' DT_FIFO = 1, ^ /usr/include/dirent.h:101:5: note: previous definition of 'DT_FIFO' was here DT_FIFO = 1, ^~~~~~~ packet-gluster.h:361:2: error: redeclaration of enumerator 'DT_CHR' DT_CHR = 2, ^ /usr/include/dirent.h:103:5: note: previous definition of 'DT_CHR' was here DT_CHR = 2, ^~~~~~ packet-gluster.h:362:2: error: redeclaration of enumerator 'DT_DIR' DT_DIR = 4, ^ /usr/include/dirent.h:105:5: note: previous definition of 'DT_DIR' was here DT_DIR = 4, ^~~~~~ packet-gluster.h:363:2: error: redeclaration of enumerator 'DT_BLK' DT_BLK = 6, ^ /usr/include/dirent.h:107:5: note: previous definition of 'DT_BLK' was here DT_BLK = 6, ^~~~~~ packet-gluster.h:364:2: error: redeclaration of enumerator 'DT_REG' DT_REG = 8, ^ /usr/include/dirent.h:109:5: note: previous definition of 'DT_REG' was here DT_REG = 8, ^~~~~~ packet-gluster.h:365:2: error: redeclaration of enumerator 'DT_LNK' DT_LNK = 10, ^ /usr/include/dirent.h:111:5: note: previous definition of 'DT_LNK' was here DT_LNK = 10, ^~~~~~ packet-gluster.h:366:2: error: redeclaration of enumerator 'DT_SOCK' DT_SOCK = 12, ^ /usr/include/dirent.h:113:5: note: previous definition of 'DT_SOCK' was here DT_SOCK = 12, ^~~~~~~ packet-gluster.h:367:2: error: redeclaration of enumerator 'DT_WHT' DT_WHT = 14 ^ /usr/include/dirent.h:115:5: note: previous definition of 'DT_WHT' was here DT_WHT = 14 ^~~~~~ Makefile:6516: recipe for target 'libdissectors_la-packet-gluster_cli.lo' failed make[5]: *** [libdissectors_la-packet-gluster_cli.lo] Error 1
Solution: edit epan/dissectors/packet-gluster.h and at line 357 delete this
/* dir-entry types from libglusterfs/src/compat.h */
enum gluster_entry_types {
DT_UNKNOWN = 0,
DT_FIFO = 1,
DT_CHR = 2,
DT_DIR = 4,
DT_BLK = 6,
DT_REG = 8,
DT_LNK = 10,
DT_SOCK = 12,
DT_WHT = 14
};
libtool: link: gcc -DPYTHON_DIR= -g -O2 -Wall -W -Wextra -Wdeclaration-after-statement -Wendif-labels -Wpointer-arith -Wno-pointer-sign -Warray-bounds -Wcast-align -Wformat-security -Wold-style-definition -Wno-error=unused-but-set-variable -fexcess-precision=fast -pthread -I/usr/include/gtk-2.0 -I/usr/lib64/gtk-2.0/include -I/usr/include/pango-1.0 -I/usr/include/atk-1.0 -I/usr/include/cairo -I/usr/include/pixman-1 -I/usr/include/libdrm -I/usr/include/gdk-pixbuf-2.0 -I/usr/include/libpng16 -I/usr/include/pango-1.0 -I/usr/include/harfbuzz -I/usr/include/pango-1.0 -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -I/usr/include/freetype2 -I/usr/include/libpng16 -I/usr/include/freetype2 -I/usr/include/libpng16 -Wl,--as-needed -o .libs/wireshark wireshark-capture-pcap-util-unix.o wireshark-capture-pcap-util.o wireshark-cfile.o wireshark-clopts_common.o wireshark-disabled_protos.o wireshark-frame_data_sequence.o wireshark-packet-range.o wireshark-print.o wireshark-ps.o wireshark-sync_pipe_write.o wireshark-timestats.o wireshark-tap-megaco-common.o wireshark-tap-rtp-common.o wireshark-version_info.o wireshark-capture_ifinfo.o wireshark-capture_sync.o wireshark-capture_ui_utils.o wireshark-airpcap_loader.o wireshark-capture.o wireshark-capture_info.o wireshark-capture_opts.o wireshark-color_filters.o wireshark-file.o wireshark-fileset.o wireshark-filters.o wireshark-g711.o wireshark-merge.o wireshark-proto_hier_stats.o wireshark-recent.o wireshark-summary.o wireshark-tempfile.o wireshark-u3.o .libs/wiresharkS.o -pthread -Wl,--export-dynamic -pthread -Wl,--export-dynamic -L/usr/local/lib ui/gtk/libgtkui.a ui/gtk/libgtkui_dirty.a ui/libui.a codecs/libcodec.a wiretap/.libs/libwiretap.so epan/.libs/libwireshark.so wsutil/.libs/libwsutil.so -lpcap -lkrb5 -lk5crypto -lcom_err -lgtk-x11-2.0 -lgdk-x11-2.0 -lpangocairo-1.0 -latk-1.0 -lcairo -lgdk_pixbuf-2.0 -lgio-2.0 -lpangoft2-1.0 -lpango-1.0 -lgobject-2.0 -lfontconfig -lfreetype -lgthread-2.0 -lgmodule-2.0 -lglib-2.0 -lm -lz -pthread -Wl,-rpath -Wl,/usr/local/lib ui/gtk/libgtkui.a(libgtkui_a-export_object_smb.o): In function `insert_chunk': /home/george/Downloads/wireshark-1.8.8/ui/gtk/export_object_smb.c:230: undefined reference to `g_memmove' collect2: error: ld returned 1 exit status
Solution: Copy the definition of g_memmove (see below) from packaging/macosx/native-gtk/glibconfig.h at line 81 and paste it on the first line of the files ui/gtk/export_object_smb.c and epan/dissectors/packet-ssl-utils.c.
#define g_memmove(dest,src,len) G_STMT_START { memmove ((dest), (src), (len)); } G_STMT_END
Making all in doc make[2]: Entering directory '/home/george/Downloads/wireshark-1.8.8/doc' /usr/bin/perl ./perlnoutf.pl ./make-authors-short.pl < ../AUTHORS > AUTHORS-SHORT cp AUTHORS-SHORT .. /usr/bin/perl ./perlnoutf.pl ./make-authors-format.pl < AUTHORS-SHORT > AUTHORS-SHORT-FORMAT cat ./wireshark.pod.template AUTHORS-SHORT-FORMAT > wireshark.pod /usr/bin/pod2man \ --center="The Wireshark Network Analyzer" \ --release=1.8.8 \ wireshark.pod > wireshark.1 Wide character in printf at /usr/share/perl5/vendor_perl/Pod/Simple.pm line 565. wireshark.pod around line 3527: Non-ASCII character seen before =encoding in 'KovE<aacute>ř'. Assuming UTF-8 POD document had syntax errors at /usr/bin/pod2man line 71.
and
cat ./wireshark.pod.template AUTHORS-SHORT-FORMAT > wireshark.pod /usr/bin/pod2man \ --center="The Wireshark Network Analyzer" \ --release=1.8.8 \ wireshark.pod > wireshark.1 Wide character in printf at /usr/share/perl5/vendor_perl/Pod/Simple.pm line 565. wireshark.pod around line 3618: Non-ASCII character seen before =encoding in 'Роман'. Assuming UTF-8 POD document had syntax errors at /usr/bin/pod2man line 71.
Solution: update the file AUTHORS and replace the names the names Peter Kovář with Peter Kovar and Роман Донченко with Roman Donchenko which are strings that only contain ASCII characters.
Download the patched version here: [download id=”3443″]