In particular, the first time I went through this and was missing the optional repository, I didn't get libpcap-devel installed. This should install all the necessary prereqes.

Note below the rpm-setup.sh -install-optional step. Go back to your working directory (/root/ for me) when you are finished. :~/cmake-3.15.5]# cmake -versionĬMake suite maintained and supported by Kitware (/cmake). If all went well, you should now be able to do cmake -version and get the current version number. You can check here for the latest version and replace the version numbers below. The newest build currently availible is 3.15.5. However, when you build Wireshark, it will complain that version 3.x is required. Building and Installing CMakeĬMake is going to be a requirement for building Wireshark, and if installed from RHEL repos will give you version 2.8.12.2. Other pre-requisites will be installed by the Wireshark rpm-setup.sh script. Technically you don't need wget if you want to scp the files over, but gcc and gcc-c++ are necessary to start the process by building CMake. EPEL repo ( epel/x86_64) may also be necessary, it was already provisioned for me.

Make sure you have yum install wget gcc gcc-c++ and have the RHEL optional repo available ( rhel-x86_64-server-optional-7). I did my initial testing on CentOS 7.7 (minimal) and my actual install was RHEL 7.7.

Additionally, most (not all) don't talk about the prerequisites for Wireshark, and none seem to make mention of rpm-setup.sh, a handy little script for installing all the rpm prerequisites. There's plenty of articles out there on installing from source, but most of them reference a Wireshark 2.x version, which seems to have slightly different build steps. The goal of this post is just to try to save people from the dependency hell. Newest Wireshark version as of this writing is 3.0.6. Now, RHEL might be back-porting security patches (I'm not sure with Wireshark), but there's no new features, and in my case, I needed mergecap specifically to be able to handle pcap-ng captures. This version was released in June 2013, and reached end of life in June 2015. The current version available via yum install is 1.10.14. Wireshark on Red Hat Enterprise Linux is, for some reason, about a decade out of date.

How to install wireshark on centos 7