2008年8月28日 星期四

[Linux文件] wireshark安裝教學

wireshark其實就是ehtereal的團體出來換名開發的軟體,
其功能和原本的ehtereal一樣,安裝方式如下:
先下指令查詢一下有那些可以安裝,

# yum search wireshark
Loading "installonlyn" plugin
fedora 100% |=========================| 2.1 kB 00:00

livna 100% |=========================| 2.1 kB 00:00

primary.sqlite.bz2 100% |=========================| 166 kB 00:02

updates 100% |=========================| 2.3 kB 00:00

primary.sqlite.bz2 100% |=========================| 2.1 MB 19:39




wireshark-gnome.i386 0.99.5-1.fc7 fedora

Matched from:
wireshark-gnome
Gnome desktop integration for wireshark and wireshark-usermode
Contains wireshark for Gnome 2 and desktop integration file
http://www.wireshark.org/



wireshark.i386 0.99.5-1.fc7 fedora

Matched from:
wireshark
Wireshark is a network traffic analyzer for Unix-ish operating systems.

This package lays base for libpcap, a packet capture and filtering
library, contains command-line utilities, contains plugins and
documentation for wireshark. A graphical user interface is packaged
separately to GTK+ package.
http://www.wireshark.org/

wireshark-gnome.i386 0.99.7-1.fc7 updates

Matched from:
wireshark-gnome
Gnome desktop integration for wireshark and wireshark-usermode
Contains wireshark for Gnome 2 and desktop integration file
http://www.wireshark.org/



pcapdiff.noarch 0.1-2.fc7 updates

Matched from:
Pcapdiff is a tool developed by the EFF to compare two packet captures and
identify potentially forged, dropped, or mangled packets. Two technically-
inclined friends can set up packet captures (e.g. tcpdump or Wireshark) on
their own computers and produce network traffic between their two computers
over the Internet. Later, they can run pcapdiff on the two packet capture
files to identify suspicious packets for further investigation. See
Detecting packet injection: a guide to observing packet spoofing by ISPs
and EFF's Test Your ISP Project for more background.

wireshark.i386 0.99.7-1.fc7 updates

Matched from:
wireshark
Wireshark is a network traffic analyzer for Unix-ish operating systems.

This package lays base for libpcap, a packet capture and filtering
library, contains command-line utilities, contains plugins and
documentation for wireshark. A graphical user interface is packaged
separately to GTK+ package.
http://www.wireshark.org/
-------------------------------------------------------
上面我們可以看到,其實就是主程式和gnome圖型化介面套件及lib檔,
所以我們就下兩次指令分別安裝主程式和圖型化介面,

# yum install wireshark
Loading "installonlyn" plugin
Setting up Install Process
Parsing package install arguments
fedora 100% |=========================| 2.1 kB 00:00

livna 100% |=========================| 2.1 kB 00:00

updates 100% |=========================| 2.3 kB 00:00

Resolving Dependencies
--> Running transaction check
---> Package wireshark.i386 0:0.99.7-1.fc7 set to be updated
--> Processing Dependency: libsmi for package: wireshark
--> Processing Dependency: libsmi.so.2 for package: wireshark
--> Restarting Dependency Resolution with new changes.
--> Running transaction check
---> Package libsmi.i386 0:0.4.5-2.fc6 set to be updated

Dependencies Resolved

=============================================================================
Package Arch Version Repository Size
=============================================================================
Installing:
wireshark i386 0.99.7-1.fc7 updates 10 M
Installing for dependencies:
libsmi i386 0.4.5-2.fc6 fedora 2.4 M

Transaction Summary
=============================================================================
Install 2 Package(s)
Update 0 Package(s)
Remove 0 Package(s)

Total download size: 12 M
Is this ok [y/N]: y
Downloading Packages:
(1/2): wireshark-0.99.7-1 100% |=========================| 10 MB 02:11

(2/2): libsmi-0.4.5-2.fc6 100% |=========================| 2.4 MB 00:00

Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing: libsmi ######################### [1/2]
Installing: wireshark ######################### [2/2]

Installed: wireshark.i386 0:0.99.7-1.fc7
Dependency Installed: libsmi.i386 0:0.4.5-2.fc6
Complete!
------------------------------------------------------
上面安裝好主程式後,再來安裝圖型化介面,
# yum install wireshark-gnome
Loading "installonlyn" plugin
Setting up Install Process
Parsing package install arguments
Resolving Dependencies
--> Running transaction check
---> Package wireshark-gnome.i386 0:0.99.7-1.fc7 set to be updated

Dependencies Resolved

=============================================================================
Package Arch Version Repository Size
=============================================================================
Installing:
wireshark-gnome i386 0.99.7-1.fc7 updates 642 k

Transaction Summary
=============================================================================
Install 1 Package(s)
Update 0 Package(s)
Remove 0 Package(s)

Total download size: 642 k
Is this ok [y/N]: y
Downloading Packages:
(1/1): wireshark-gnome-0. 100% |=========================| 642 kB 00:00

Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing: wireshark-gnome ######################### [1/1]

Installed: wireshark-gnome.i386 0:0.99.7-1.fc7
Complete!
--------------------------------------------------------------
這樣安裝完後,就可以在「應用程式」->「網際網路」,
開啟wireshark natwork analyzer應用程式了!
至於相關使用上的教學,和windows上大同小異,
就留待下篇一并講解~
--