Skip to content

Conversation

@pmenzel
Copy link
Collaborator

@pmenzel Paul Menzel (pmenzel) commented Oct 8, 2026 •

$ tshark --version
TShark (Wireshark) 4.6.9 (Git commit 2d548b197c75).

Copyright 1998-2026 Gerald Combs <gerald@wireshark.org> and contributors.
Licensed under the terms of the GNU General Public License (version 2 or later).
This is free software; see the file named COPYING in the distribution. There is
NO WARRANTY; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compile-time info:
 Bit width: 64-bit
  Compiler: GCC 12.5.0
      GLib: 2.90.0
 With:
  +brotli                      +LZ4 1.9.4
  +Gcrypt 1.9.4                +nghttp2 1.62.1
  +GnuTLS 3.8.13 and PKCS#11   +PCRE2 10.37 2021-05-26
  +Kerberos (MIT)              +POSIX capabilities (Linux)
  +libnl 3                     +Snappy 1.0.5
  +libpcap                     +xxhash 0.8.1
  +libxml2 2.15.3              +zlib 1.3
  +Lua 5.3.5                   +Zstandard 1.5.6
 Without:
  -libsmi   -MaxMind  -nghttp3  -zlib-ng

Runtime info:
      OS: Linux 6.12.74.mx64.489
     CPU: Intel(R) Xeon(R) CPU E5-2603 v4 @ 1.70GHz (with SSE4.2)
  Memory: 96312 MB of physical memory
    GLib: 2.90.0
  Locale: LC_TYPE=en_US.UTF-8
 Plugins: supported, 0 loaded
 With:
  +brotli 0.6.0                     +nghttp2 1.62.1
  +c-ares 1.15.0                    +PCRE2 10.37 2021-05-26
  +Gcrypt 1.9.4                     +xxhash 801
  +GnuTLS 3.8.13                    +zlib 1.3
  +libpcap 1.9.0 (with TPACKET_V3)  +Zstandard 1.5.6
  +LZ4 1.9.4

4.6.9 is the latest stable release; 4.7.x is the development series.
The tarball’s SHA256 matches upstream’s SIGNATURES-4.6.9.txt:

    d062d416a1ab3a49975aafe3a671c882dde0562ccd71b078808ceb59d465fc0f

The AUTH_MARIUX patch no longer applies:

    $ patch -p1 --dry-run < /src/mariux/patches/wireshark-add-auth-mariux
    checking file epan/dissectors/packet-rpc.c
    Hunk #1 succeeded at 106 with fuzz 2 (offset 7 lines).
    Hunk #2 FAILED at 1285.
    Hunk #3 succeeded at 1412 with fuzz 1 (offset 2 lines).
    1 out of 3 hunks FAILED
    checking file epan/dissectors/packet-rpc.h
    Hunk #1 FAILED at 30.
    1 out of 1 hunk FAILED

Upstream added AUTH_TLS (7) next to it, and dissect_rpc_authunix_cred()
now takes pinfo. Flavor 8 is still unassigned, so use the same patch,
rebased onto 4.6.9, as wireshark-4.6.9-add-auth-mariux.patch, which
is mirrored on beehive.

Wireshark renamed the CMake option USE_QT6 to USE_qt6, and CMake only
lists the old, now unused name under “Manually-specified variables were
not used” at the end of its output, so a plain version bump would
quietly switch to Qt6. Spell it the new way to keep building with Qt5.

Assisted-by: claude-opus-5.5 (Claude Code)
Wireshark 4.6 prefers Qt6 (USE_qt6 defaults to ON) and deprecates Qt5:

    CMake Deprecation Warning at CMakeLists.txt:1424 (message):
      Support for building with Qt5 will be removed in the future.

/usr/local/qt6 (qt6-6.9.1) has all modules Wireshark needs, Core5Compat,
LinguistTools, Multimedia and DBus included, and CopyQ already builds
against it. Drop the Qt5 pin from Wireshark 4.0.2 and point CMake at Qt6.

Assisted-by: claude-opus-5.5 (Claude Code)
Wireshark 4.0.2 installed its headers and wireshark.pc with
`make install`. Wireshark 4.6.9 puts them, and the CMake package files,
into the install component Development, marked EXCLUDE_FROM_ALL, so
the package lost them:

    $ tar -xjf wireshark-4.6.9-0.x86_64.bee.tar.bz2 -C pkg
    $ PKG_CONFIG_LIBDIR=pkg/usr/lib/pkgconfig pkg-config --modversion wireshark
    Package wireshark was not found in the pkg-config search path.
    Perhaps you should add the directory containing `wireshark.pc'
    to the PKG_CONFIG_PATH environment variable
    No package 'wireshark' found

Install that component in addition, so that dissector plugins and other
programs can still be built against libwireshark. The package now ships
675 headers below /usr/include/wireshark, /usr/lib/pkgconfig/wireshark.pc
and /usr/lib/cmake/wireshark/. A test program calling
epan_get_version() builds with pkg-config as well as with CMake’s
find_package(Wireshark 4.6), and prints 4.6.9.

The new wireshark.pc also no longer has the doubled libdir of 4.0.2’s
(libdir=${exec_prefix}//usr/lib).

Assisted-by: claude-opus-5.5 (Claude Code)
@pmenzel Paul Menzel (pmenzel) merged commit 31f95e4 into master Oct 8, 2026
@pmenzel Paul Menzel (pmenzel) deleted the update-wireshark-from-4.0.2-to-4.6.9 branch October 8, 2026 19:10
Sign in to join this conversation on GitHub.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant