ubuntu下的wireshark手动编译安装

今天在ubuntu下进行安装wireshark，费了很多时间，过程中出了很多错误，但最终安装成功了，这里写下自己的安装步骤和方法，供大家参考。

安装编译工具：

　　$sudo apt-get install build-essential

　　为了成功编译Wireshark，您需要安装GTK+的开发文件和GLib库(libraries)。

　　$sudo apt-get install libgtk2.0-dev libglib2.0-dev

　　安装Checkinstall以便管理您系统中直接由源代码编译安装的软件。

　　$sudo apt-get install checkinstall

wireshark源码下载地址：http://www.wireshark.org/download.html（页面中的source code）

下载后的文件名：wireshark-1.2.2.tar.bz2

cd到文件目录解压：$tar -xvf wireshark-1.2.2.tar.bz2

$cd wireshark-1.2.2

编译安装命令如下：

$./configure

$make

$sudo make install

其中make编译时间会比较长，这样下来就基本安装了。

下面是我这篇文章的关键，也是用ubuntu安装的过程中极有可能遇到的问题，且都是在进行./configure编译过程中出现，两个问题如下：

---------------------------------------------------------------------------------------------------------

问题1：

view plaincopy to clipboardprint?

./configure执行到最后出错   

checking for perl... /usr/bin/perl   

checking for bison... no   

checking for byacc... no   

checking for yacc... no   

configure: error: I couldn't find yacc (or bison or ...); make sure it's installed and in your path  

./configure执行到最后出错

checking for perl... /usr/bin/perl

checking for bison... no

checking for byacc... no

checking for yacc... no

configure: error: I couldn't find yacc (or bison or ...); make sure it's installed and in your path

解决办法：

view plaincopy to clipboardprint?

sudo apt-get install flex bison  

sudo apt-get install flex bison

yacc(Yet Another Compiler Compiler)，是Unix/Linux上一个用来生成编译器的编译器（编译器代码生成器）。

如想深入了解google下。

问题2：

view plaincopy to clipboardprint?

configure: error: Header file pcap.h not found; if you installed libpcap from source, did you also do "make install-incl", and if you installed a binary package of libpcap, is there also a developer's package of libpcap,   

and did you also install that package?  

configure: error: Header file pcap.h not found; if you installed libpcap from source, did you also do "make install-incl", and if you installed a binary package of libpcap, is there also a developer's package of libpcap,

and did you also install that package?

问题原因是ubuntu下缺少pcap.h等文件。

解决方法：

编译安装libpcap.

在www.tcpdump.org页面中可下载源码：libpcap-1.0.0.tar.gz

cd到文件目录：

view plaincopy to clipboardprint?

$tar -xvf libpcap-1.0.0.tar.gz   

$cd libpcap-1.0.0.tar.gz   

$./configure   

$make   

$sudo make install  

$tar -xvf libpcap-1.0.0.tar.gz

$cd libpcap-1.0.0.tar.gz

$./configure

$make

$sudo make install

----------------------------------------------------------------------------------------------------------------------------------------------------

采用上面的方法后再回到文章前面的步骤：

$cd wireshark-1.2.2编译安装：

$./configure

$make

$sudo make install

这样就安装好了。

启动方法：进入wireshark-1.2.2，输入命令：view plaincopy to clipboardprint?

$sudo ./wireshark  

$sudo ./wireshark

这里如果不用sudo，则wireshark找不到网络设备接口，这主要与权限有关，启动时注意下就行。