Wireshark-Waveform-Plugin

Distro	Version	Wireshark Version	Status
Ubuntu	20.04 LTS 22.04 LTS 24.04 LTS	3.2.6 3.6.2 4.2.2
openSUSE	Tumbleweed	latest
CentOS	Stream 9	3.4.10
Archlinux	latest	latest

This repository adds to Wireshark the ability to analyze an AXI stream in Wireshark and combines this with a waveform based on PulseView.

Development Environment

The project is configured for usage with ADE. Inside the container, all required resources are installed to develop a plugin for wireshark and built wireshark. For development, CLion is installed and can be used inside the container. Please make sure, you have installed ADE and followed the instructions. Ensure that a .gitconfig file exists, otherwise there will be problems with git inside the container.

Inside the ADE home directory (e.g. adehome), the project source can be cloned:

git clone git@github.com:pmo73/Wireshark-Waveform-Plugin.git

Per default the project will launch a container with the latest Ubuntu image. But there are also images supported for Arch Linux, openSUSE or CentOS. The following can be used to download and launch the container e.g.: ade --rc scripts/.aderc-centos start.

Usage without ADE

The dissector is a cmake based wireshark plugin. For building please make sure that the required wireshark dependencies, including wireshark headers, are installed. For Debian based systems the following command line may be used: apt install wireshark-dev wireshark-common

Installation

The Plugin can be installed with the following steps.

cmake .
make
make install

Per default, the plugin will be installed inside the local plugin folder of wireshark. For installing the plugin global on your system, run the following command:

cmake -DINSTALL_PLUGIN_LOCAL=OFF .
make
sudo make install

Troubleshooting

Unfortunately, the plugin can only be used with manual customization. The reason for this is a bug that plugins require data structures from the internal headers, which are no longer installed with the develop packages. Therefore, the headers have to be added manually, which is already done inside the docker containers. For Ubuntu 24.04 the following commands can be used:

sudo wget -O /usr/include/wireshark/wiretap/wtap-int.h https://raw.githubusercontent.com/wireshark/wireshark/refs/tags/wireshark-4.2.2/wiretap/wtap-int.h
sudo wget -O /usr/include/wireshark/wsutil/file_util.h https://raw.githubusercontent.com/wireshark/wireshark/refs/tags/wireshark-4.2.2/wsutil/file_util.h