You are here

Wireshark

21 posts / 0 new
Last post
Grokmeister
Offline
Last seen: 16 years 5 months ago
Joined: 2008-06-26 13:27
Wireshark
m-p-3
m-p-3's picture
Offline
Last seen: 7 months 6 days ago
Joined: 2006-06-17 21:25
Just want to be sure, but

Just want to be sure, but doesn't Wireshark require a packet monitoring tool called WinPCap on Windows ?

BvF7734
Offline
Last seen: 2 years 3 months ago
Joined: 2006-04-20 21:07
...

No it does not. Besides, this has been portable for a few versions so far. I remember at least on the last version prior to 1.0 was fully paf compliant.

You have the right to remain silent. Anything you do or say will be exaggerated or mis-quoted and used against you.

Lurking_Biohazard
Lurking_Biohazard's picture
Offline
Last seen: 6 years 3 months ago
Joined: 2006-02-18 18:06
Really?

Just used it two weeks ago, and it still did. The portable version will install and uninstall it, but it still needs it.

Also "fully paf compliant" just means it was packaged in a certain way. I've seen apps that are not truly portable be in paf form.

~Lurk~

portable-joe
Offline
Last seen: 14 years 10 months ago
Joined: 2010-02-04 14:29
not true, it does

http://wiki.wireshark.org/CaptureSetup/CaptureSupport

if you want to start it without ull be notified WinPcap is not installed.

Aint there an easy way to integrate it into the PA?
Whats the use installing if i want to use it portable?

John T. Haller
John T. Haller's picture
Online
Last seen: 4 min 6 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
1.5 Years Old

This topic is 1.5 years old and SEVERELY outdated. A PAF version of Wireshark is available at wireshark.org.

Sometimes, the impossible can become possible, if you're awesome!

tal
Offline
Last seen: 1 year 8 months ago
Developer
Joined: 2009-08-07 07:34
Hi

why wireshark portable is not at official release?

Zach Thibeau
Zach Thibeau's picture
Offline
Last seen: 2 years 1 month ago
Developer
Joined: 2006-05-26 12:08
again as John mentioned this

again as John mentioned this is an old topic, and mostly the reasons it isn't an official package is probably (this is just from memory) that it requires an external driver which would need administrative privileges to run the application in question.

your friendly neighbourhood moderator Zach Thibeau

tal
Offline
Last seen: 1 year 8 months ago
Developer
Joined: 2009-08-07 07:34
thx for your quick answer

all the portableapps is free from administrative privileges?
what about Smart Defrag Portable? i am sure it need administrative privileges. you can't Defrag HD without that.
so why there is an option at portableapps menu to run program as administrator?

it seems odd to add this feature and not let portable apps with administrative privileges.
i hope see this program. it very useful, and i am sure many people will happy to see it.

thx tal.

Zach Thibeau
Zach Thibeau's picture
Offline
Last seen: 2 years 1 month ago
Developer
Joined: 2006-05-26 12:08
in this case it's 2 different

in this case it's 2 different things, wireshark needs an external driver while the defrag program doesn't to handle driver stuff would be harder to handle which is pretty much why you won't see stuff like wireshark or virtual box as a portable app.

your friendly neighbourhood moderator Zach Thibeau

ottosykora
Offline
Last seen: 1 day 20 hours ago
Joined: 2007-10-11 17:48
many versions

wireshark produces lot of versions, very frequent update, it is probably not possible for someone from outside to monitor and check and test all their releases. They are times when they have two versions per day.

I think to have a release also here and maintain it will be soon a full time job for someone, and this just because of one util program most people have no use for anyway.

Yes there are some exceptions as far as admin rights are concerned, any defrag will need to be run so, but the wireshark when run without the pcap driver is really not lot of fun, I have no clue what one can use it for then. It really needs to make full install of the driver and uninstall it at the end.

Leave it to the people of wireshark, then all will probably work best, get the copy time to time from them and you have what you need.

Otto Sykora
Basel, Switzerland

John T. Haller
John T. Haller's picture
Online
Last seen: 4 min 6 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Non-Compliant

The reason it is not included is because it is non-compliant. It's using a much older launcher and installer. The installer doesn't support the automatic updater.

Sometimes, the impossible can become possible, if you're awesome!

r.andom
r.andom's picture
Offline
Last seen: 16 years 3 months ago
Joined: 2007-11-12 15:11
Old news

Wireshark Portable v1.0.0 was published on March 30th, as you can see at the SF download page.

I'd appreciate a page on PortableApps.com with links to open source programs in PAF format that are not hosted here. That would ease up things ...

r.andom
r.andom's picture
Offline
Last seen: 16 years 3 months ago
Joined: 2007-11-12 15:11
Version 1.0.1

Wireshark Portable 1.0.1 (in PAF format) was published today.
It's a security update, so you are recommended to update.

crux
Offline
Last seen: 4 years 1 week ago
Joined: 2008-06-13 18:10
Updates

It was hard for me to find any information about WiresharkPortable, but I finally found a few pages about it.

WiresharkPortable 1.0.2
http://sourceforge.net/project/showfiles.php?group_id=255

WiresharkPortable 1.0.99 (latest build)
http://www.wireshark.org/download/automated/win32/

Wireshark U3 Package
http://www.wireshark.org/download.html

WiresharkPortable Wiki
http://wiki.wireshark.org/WiresharkPortable

From their mailing list:

http://www.wireshark.org/lists/wireshark-users/200802/msg00213.html
"You need to have installed the PortableApps framework (Base, Standard or Lite) first...When you install WiresharkPortable on your stick from the PortableApps menu ("Options/Install New App") the appropriate Wireshark files will be installed on your stick. You will then get a new menu item on the PortableApps menu that will allow you to run Wireshark from your USB stick."

(I find it hard to believe that the PortableApps platform is necessary.)

http://www.wireshark.org/lists/wireshark-users/200708/msg00093.html
"For an U3 package, you'll need an U3 stick to work properly. The U3 system will set some special U3 environment variables...[To tell Wireshark not to use the AppData folder,] you can use -P command line option to adjust the personal folders, see http://www.wireshark.org/docs/wsug_html_chunked/ChCustCommandLine.html ".

statement
Offline
Last seen: 15 years 6 months ago
Joined: 2008-05-06 12:32
From the page: "If WinPcap is

From the page: "If WinPcap is not installed on the machine, WiresharkPortable will install it when and starts, and remove it when it exits. This can become tedious if WiresharkPortable is started many times."

Is Wireshark still packaged this way because of license issues with WinPcap? Or because it is a driver? Or both?

BuddhaChu
BuddhaChu's picture
Offline
Last seen: 5 months 1 week ago
Joined: 2006-11-18 10:26
It's packaged that way

It's packaged that way because

a) It's a driver and needs to be installed
b) Drivers need to be installed by a user with "admin" on the target machine

John Haller from this website helped the Wireshark guys make it portable. There's no need to crosslink from this website to theirs.

Cancer Survivors -- Remember the fight, celebrate the victory!
Help control the rugrat population -- have yourself spayed or neutered!

bobofborg
Offline
Last seen: 16 years 7 hours ago
Joined: 2008-12-02 16:43
URL Update...

Can someone update the URL above? They have had several updates since but the URL listed is directly going to the 1.0.0 release.

Can you link to the Download page
http://sourceforge.net/project/showfiles.php?group_id=255&package_id=193847

ottosykora
Offline
Last seen: 1 day 20 hours ago
Joined: 2007-10-11 17:48
they have many updates

almost daily, they 'nightly builds' etc, all changing there too fast I think.

Otto Sykora
Basel, Switzerland

statement
Offline
Last seen: 15 years 6 months ago
Joined: 2008-05-06 12:32
I had issues with Wireshark

I had issues with Wireshark recently, after uninstalling the winpcap, my computer BSOD with driver issues and had to reverted to an earlier state. I can't recommend it if you're just gonna test drive it, other wise install it and leave it alone.

loveportable
Offline
Last seen: 13 years 11 months ago
Joined: 2010-12-22 01:11
WinPCap is optional

It will install and uninstall it by default. If you do not want it to do this, you can modify the .ini file to automatically bypass WinPCap:

In \WiresharkPortable\Other\WiresharkPortableSource\,
copy WiresharkPortable.ini to \WiresharkPortable.

Modify the line DisableWinPcapInstall=false
to DisableWinPcapInstall=true

Log in or register to post comments