Wireshark pyreshark

Install WireShark Ubuntu from source

Download from https://www.wireshark.org/download.html Extract the files. Do not install yet.

Download the pyreshark source from here

hg clone https://code.google.com/p/pyreshark/

Copy the files to here (WIRESHARK_DIR)/wireshark-1.12.1/plugins/pyreshark

Install dependancies

You may need to install these dependancies and more;
Qt sudo apt-get install qt4-dev-tools libqt4-dev libqt4-core libqt4-gui
flex sudo apt-get install flex
bison sudo apt-get install bison
gtk 3 sudo apt-get install libgtk-3-dev
libpcap sudo apt-get install libpcap-dev
autoconfig sudo apt-get install autoconf
libtool sudo apt-get install libtool

Run autogen.sh

From within the wireshark dir
./autogen.sh

Make the plugins

make -C plugins

Compile Wireshark.

./configure

You need to setup a working root directory for wireshark otherwise wireshark will not install your plugin.

./configure --prefix=${HOME}/build/root && make install

Build your plugin pyreshark

cd plugins/pyreshark  
make install

Make and Install wireshark

make  

sudo make install

Configure

I had an error when starting wireshark this fixed it sudo ldconfig
Start wireshark in terminal with wireshark

##Edited PYTHONPATH In .bashrc I added the following; PYTHONPATH=$PYTHONPATH:(WIRESHARK_DIR)/wireshark-1.12.1/plugins/pyreshark

Unzip and copy the pyreshark.dll file into this location

/usr/lib/wireshark/libwireshark1/plugins/



sudo apt-get install wireshark

hg clone https://code.google.com/p/pyreshark/

./configure --prefix=${HOME}/build/root && make install

go to (Wireshark_DIR)/plugins/pyreshark make install

https://github.com/ashdnazg/pyreshark/releases/tag/0.1.3

To view which plugins are installed in wireshark goto help about wireshark then click the plugins tab.

#FAILED TO GET PYRESHARK TO RUN. WE CAN JUST USE C TO CREATE DISSECTORS INSTEAD.

calumroy/wireshark pyreshark.md