ubuntu下编译安装wireshark

安装编译工具：

　　$sudo apt-get install build-essential

　　为了成功编译Wireshark，您需要安装GTK+的开发文件和GLib库(libraries)。

　　$sudo apt-get install libgtk2.0-dev libglib2.0-dev

　　安装Checkinstall以便管理您系统中直接由源代码编译安装的软件。

　　$sudo apt-get install checkinstall

wireshark源码下载地址：http://www.wireshark.org/download.html（页面中的source code）

下载后的文件名：wireshark-1.2.2.tar.bz2

cd到文件目录解压：$tar -xvf wireshark-1.2.2.tar.bz2

$cd wireshark-1.2.2

编译安装命令如下：

$./configure

$make
$sudo make install

其中make编译时间会比较长，这样下来就基本安装了。

下面是我这篇文章的关键，也是用ubuntu安装的过程中极有可能遇到的问题，且都是在进行./configure编译过程中出现，两个问题如下：

---------------------------------------------------------------------------------------------------------

问题1：

view plaincopy to clipboardprint?
./configure执行到最后出错   
checking for perl... /usr/bin/perl   
checking for bison... no   
checking for byacc... no   
checking for yacc... no   
configure: error: I couldn't find yacc (or bison or ...); make sure it's installed and in your path  
./configure执行到最后出错
checking for perl... /usr/bin/perl
checking for bison... no
checking for byacc... no
checking for yacc... no
configure: error: I couldn't find yacc (or bison or ...); make sure it's installed and in your path

解决办法：

view plaincopy to clipboardprint?
sudo apt-get install flex bison  
sudo apt-get install flex bison

yacc(Yet Another Compiler Compiler)，是Unix/Linux上一个用来生成编译器的编译器（编译器代码生成器）。

如想深入了解google下。

问题2：

view plaincopy to clipboardprint?
configure: error: Header file pcap.h not found; if you installed libpcap from source, did you also do "make install-incl", and if you installed a binary package of libpcap, is there also a developer's package of libpcap,   
and did you also install that package?  
configure: error: Header file pcap.h not found; if you installed libpcap from source, did you also do "make install-incl", and if you installed a binary package of libpcap, is there also a developer's package of libpcap,
and did you also install that package?

问题原因是ubuntu下缺少pcap.h等文件。

解决方法：

编译安装libpcap.

在www.tcpdump.org页面中可下载源码：libpcap-1.0.0.tar.gz

cd到文件目录：

view plaincopy to clipboardprint?
$tar -xvf libpcap-1.0.0.tar.gz   
$cd libpcap-1.0.0.tar.gz   
$./configure   
$make   
$sudo make install  
$tar -xvf libpcap-1.0.0.tar.gz
$cd libpcap-1.0.0.tar.gz
$./configure
$make
$sudo make install