wireshark: readd to pentoo as I got the smacketh laideth downeth on meeth

net-wireless/wireshark/Manifest

@@ -0,0 +1,28 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+AUX wireshark-1.6.6-gtk-pcap.patch 841 SHA256 862c301f450fcb775e3bd907e5a6ca667b5a11b819768b66a7c848c2c3c90d8a SHA512 0ed1bce8b57942de72ee0a8d78ef7cc345ffea512248fa65acd4e8386a5aa61dde14663090578c78f3eee88c7966e8d40aa6d3dce13146c2adf5ed8ded019253 WHIRLPOOL a45a3d04c9823eb149174fbbaaeb5437e525d77da962aa627509941da3119e87d4eef26cb06b1d3534356c4fd1d4bf31bc102dbf8b3f69994a19dba8d730d05f
+AUX wireshark-1.8.0-underlinking.patch 239 SHA256 63a0ecdd4b45e048c6f8a3f25c0fe0b7a827df8e7dc2167cc3ad51ab94b8eae7 SHA512 df34235187efc9c423acd2b0f14d7ff569db090566abfa8f343a6826afb246f6dbacf84af9d4903f3f2656ed832f8329ae4037536d7be1f18db8e36b1fb4c1c6 WHIRLPOOL 3fda73b9fa6cd6e22201a20f0e4331a610ea13f53a8b352f89f27e89e1a2b4edc16bededa6677892ec65b53c78dbc53ce051082824ddd7e1d823f0001e33faed
+DIST wireshark-1.6.8.tar.bz2 21967111 SHA256 d4fbaffa4fd32543ed1d03b3097bf89a7d492e6d02e9bf8f8aa8a71281f3057f SHA512 1f2eae0b94632f0bc37dbab16afdba711e1b3c8b059390645c38523d114b2c2908ccd0c396fc0c3b89be8b6fb8a314fee7b1e16c57ce05e98bf88d923b55fc78 WHIRLPOOL b46571b9cf33d35158ef95c0df65fb4941ab2097d687ebc21501ca4f46bed176b91893adb910a884a16c1054d2be9cb52c68f4f552871a81c91c3618fec811f4
+DIST wireshark-1.8.0.tar.bz2 24425043 SHA256 4cb802f116bbdcfa71afbc842dbfacd8f96594f4b221cbb5616d5c17bc696a62 SHA512 bd2b476dda089d27aba73ae5d5974757ec0fd1f6047adecad9966366cacd6e0565a313be1f14f59e38011cd18331f7cf4aaca69228d9af1201866c5174bf41d4 WHIRLPOOL e1173052180ad8f5634395cbdf5fc57e0339870aedfe7173ea9af44cdf1ec4386cfb314f34c10a37c38aae0fa1808a2ae08d6ae5076d1c9b2d1cfdf319ab784f
+EBUILD wireshark-1.6.8.ebuild 6453 SHA256 45983c22afd371ca12b7cfaaa7b8657bb2c661ecc78c7d639cd8f7067e73670d SHA512 ab98125603ada0828444414b8807760e4f5bf009547fe58110ba6cf3ff981df18bd34e7d17605ac11fdbd592a8ef9e0b5a1985775dbea11ea750b3aaedb9b6fe WHIRLPOOL 500f699b5f8d84c85cb2422745a95e2a47cdf7915cb030ea5d688a1cd2a772c9060b8058ee577eecfde2a9bfb4e2dcbe1c380fd113621cd9240e1db82d964110
+EBUILD wireshark-1.8.0.ebuild 6602 SHA256 e337143e7d5c575c7dc402aa6a49775dcc38f384926887d3268e98a0aadfa4ba SHA512 700e438a5d66468ad05e61cc1b1e5cedc4bcb953c98d2bdf0e4d381fbd790d4079d802bcd1ab6a75cd046c89675aad5dd782be1401154f54bf8229083c432cb7 WHIRLPOOL 0af62d8945fbd8d9b2735d3f95a45b6721ea22b4061c338f22020c80a5deaa71c86b824b1ae38e2b1b9360f6548b09e90dd2001749ab6af85c507b6ffd08c6f1
+MISC ChangeLog 51787 SHA256 326a7534b56331374aa8f9d7f3400769c4a33bc9616ab1eb308b38ede4e94b22 SHA512 4fd2b3f0d893c0b4ddc5a0ef3011f4680dec458fe6fd8b191a950a8fe6c89b1c830a8b55255880b84d052e021f81049cf6b1873d7917d06cc82cc7b8a2a6b6b0 WHIRLPOOL 7a982e298109ec50dd3afdce9ffd2f0d787b634356cf49db757739adf3014b644b16d0092e9be7ba0fb8edfb369c602d039992e6142d5fae4a60a4589a6c1359
+MISC metadata.xml 2591 SHA256 d1e0f669c78c45324dfd09f28c90b53fff9b8f8fa3de3d9304ee2d4cb4573499 SHA512 7c71ea9f31fe9307c422a7fa0c83ac72ca177a5b3a56539d02cff63e9dbfc4938f000ef3ba454558aed3cea3f5932cc788dcc599c4ec1c0e2a736922376732eb WHIRLPOOL 0ac717e4ca0f949333f4d0cff85bd45257da3216a41cd35fcd74358c94067772910785371739995523fb92688318907f3e909261da240b3a4ad32ce51210af05
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.19 (GNU/Linux)
+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+=xahd
+-----END PGP SIGNATURE-----

net-wireless/wireshark/files/CVS/Entries

@@ -0,0 +1,3 @@
+/wireshark-1.6.6-gtk-pcap.patch/1.1/Tue Apr 10 16:28:05 2012//
+/wireshark-1.8.0-underlinking.patch/1.3/Wed Jun 27 21:11:04 2012//
+D

net-wireless/wireshark/files/CVS/Repository

@@ -0,0 +1 @@
+gentoo-x86/net-analyzer/wireshark/files

net-wireless/wireshark/files/CVS/Root

@@ -0,0 +1 @@
+zerochaos@cvs.gentoo.org:/var/cvsroot

net-wireless/wireshark/files/wireshark-1.6.6-gtk-pcap.patch

@@ -0,0 +1,30 @@
+--- a/gtk/main.c
++++ b/gtk/main.c
+@@ -2834,7 +2834,9 @@
+ 
+   color_filters_init();
+   decode_as_init();
++#ifdef HAVE_LIBPCAP
+   capture_filter_init();
++#endif
+ 
+   /* the window can be sized only, if it's not already shown, so do it now! */
+   main_load_window_geometry(top_level);--- a/gtk/capture_dlg.c
++++ b/gtk/capture_dlg.c
+@@ -371,6 +371,7 @@
+ 
+ /** Initialize background capture filter syntax checking
+  */
++#ifdef HAVE_LIBPCAP                                                                                                                 
+ void capture_filter_init(void) {
+   cfc_data.filter_text = NULL;
+   cfc_data.filter_te = NULL;
+@@ -383,6 +384,7 @@
+   g_thread_create(check_capture_filter_syntax, NULL, FALSE, NULL);
+ #endif
+ }
++#endif
+ 
+ static void
+ capture_filter_check_syntax_cb(GtkWidget *w _U_, gpointer user_data _U_)
+

net-wireless/wireshark/files/wireshark-1.8.0-underlinking.patch

@@ -0,0 +1,10 @@
+--- a/Makefile.am
++++ b/Makefile.am
+@@ -333,6 +333,7 @@ wireshark_LDADD = \
+ 	@LIBGNUTLS_LIBS@		\
+ 	@LIBSMI_LDFLAGS@		\
+ 	@PORTAUDIO_LIBS@		\
++	@GLIB_LIBS@			\
+ 	@GTK_LIBS@ -lm
+ 
+ wireshark_CFLAGS = $(AM_CLEAN_CFLAGS) $(py_dissectors_dir)

net-wireless/wireshark/metadata.xml

@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+<herd>netmon</herd>
+<maintainer>
+	<email>pva@gentoo.org</email>
+	<name>Peter Volkov</name>
+</maintainer>
+<maintainer>
+	<email>zerochaos@gentoo.org</email>
+	<name>Rick Farina</name>
+	<description>Excessive wireshark user and enthusiast</description>
+</maintainer>
+<longdescription>
+	Wireshark is the world's foremost network protocol analyzer, and is the de
+	facto (and often de jure) standard across many industries and educational
+	institutions. Wireshark has a rich feature set which includes 1) deep
+	inspection of hundreds of protocols, with more being added all the time, 2)
+	live capture and offline analysis, 3) standard three-pane packet browser, 4)
+	captured network data can be browsed via a GUI, or via the TTY-mode TShark
+	utility, 5) the most powerful display filters in the industry, 6) rich VoIP
+	analysis, 7) read/write many different capture file formats: tcpdump
+	(libpcap), Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network
+	Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer®
+	Pro, and NetXray®, Network Instruments Observer, Novell LANalyzer, RADCOM
+	WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks
+	Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others, 8)
+	capture files compressed with gzip can be decompressed on the fly, 9) live
+	data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB,
+	Token Ring, Frame Relay, FDDI, and others, 10) decryption support for many
+	protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and
+	WPA/WPA2, 11) coloring rules can be applied to the packet list for quick,
+	intuitive analysis, 12) output can be exported to XML, PostScript®, CSV, or
+	plain text 
+</longdescription>
+<use>
+<flag name='ares'>Use GNU <pkg>net-dns/c-ares</pkg> library to resolve DNS names</flag>
+<flag name='btbb'>Use <pkg>net-libs/libbtbb</pkg> (and appropriate hardware) to sniff bluetooth baseband</flag>
+<flag name='doc-pdf'>Build documentation in pdf format (US and a4 paper sizes)</flag>
+<flag name='gcrypt'>Use GNU crypto library (<pkg>dev-libs/libgcrypt</pkg>) to decrypt ipsec traffic</flag>
+<flag name='pcap'>Use <pkg>net-libs/libpcap</pkg> for network packet capturing (build dumpcap, rawshark)</flag>
+<flag name='smi'>Use <pkg>net-libs/libsmi</pkg> to resolve numeric OIDs into human readable format</flag>
+<flag name='third-party-plugins'>Build plugins from third party sources</flag>
+</use>
+</pkgmetadata>

net-wireless/wireshark/wireshark-1.8.0.ebuild

@@ -0,0 +1,224 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/wireshark/wireshark-1.8.0.ebuild,v 1.6 2012/07/09 19:39:21 zerochaos Exp $
+
+EAPI="4"
+PYTHON_DEPEND="python? 2"
+inherit autotools eutils flag-o-matic python toolchain-funcs user
+
+[[ -n ${PV#*_rc} && ${PV#*_rc} != ${PV} ]] && MY_P=${PN}-${PV/_} || MY_P=${P}
+DESCRIPTION="A network protocol analyzer formerly known as ethereal"
+HOMEPAGE="http://www.wireshark.org/"
+SRC_URI="http://www.wireshark.org/download/src/all-versions/${MY_P}.tar.bz2"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd"
+IUSE="adns ares btbb doc doc-pdf gtk ipv6 lua gcrypt geoip kerberos
+third-party-plugins profile +pcap portaudio python +caps selinux smi ssl zlib"
+
+REQUIRED_USE="btbb? ( third-party-plugins )"
+
+RDEPEND=">=dev-libs/glib-2.14:2
+	zlib? ( sys-libs/zlib
+		!=sys-libs/zlib-1.2.4 )
+	smi? ( net-libs/libsmi )
+	gtk? ( >=x11-libs/gtk+-2.4.0:2
+		x11-libs/pango
+		dev-libs/atk
+		x11-misc/xdg-utils )
+	ssl? ( <net-libs/gnutls-3 )
+	gcrypt? ( dev-libs/libgcrypt )
+	pcap? ( net-libs/libpcap )
+	caps? ( sys-libs/libcap )
+	kerberos? ( virtual/krb5 )
+	portaudio? ( media-libs/portaudio )
+	ares? ( >=net-dns/c-ares-1.5 )
+	!ares? ( adns? ( net-libs/adns ) )
+	geoip? ( dev-libs/geoip )
+	lua? ( >=dev-lang/lua-5.1 )
+	btbb? ( >=net-libs/libbtbb-0.8-r1 )
+	selinux? ( sec-policy/selinux-wireshark )"
+
+DEPEND="${RDEPEND}
+	doc? ( dev-libs/libxslt
+		dev-libs/libxml2
+		app-doc/doxygen
+		doc-pdf? ( dev-java/fop ) )
+	virtual/pkgconfig
+	dev-lang/perl
+	sys-devel/bison
+	sys-apps/sed
+	sys-devel/flex
+	!!<net-analyzer/wireshark-1.8.0"
+
+S=${WORKDIR}/${MY_P}
+
+# borrowed from GSoC2010_Gentoo_Capabilities by constanze and flameyeys
+# @FUNCTION: fcaps
+# @USAGE: fcaps {uid:gid} {file-mode} {cap1[,cap2,...]} {file}
+# @RETURN: 0 if all okay; non-zero if failure and fallback
+# @DESCRIPTION:
+# fcaps sets the specified capabilities in the effective and permitted set of
+# the given file. In case of failure fcaps sets the given file-mode.
+fcaps() {
+	local uid_gid=$1
+	local perms=$2
+	local capset=$3
+	local path=$4
+	local res
+
+	chmod $perms $path && \
+	chown $uid_gid $path
+	res=$?
+
+	use caps || return $res
+
+	#set the capability
+	setcap "$capset=ep" "$path" &> /dev/null
+	#check if the capabilitiy got set correctly
+	setcap -v "$capset=ep" "$path" &> /dev/null
+	res=$?
+
+	if [ $res -ne 0 ]; then
+		ewarn "Failed to set capabilities. Probable reason is missed kernel support."
+		ewarn "Kernel must have <FS>_FS_SECURITY enabled where <FS> is the filesystem"
+		ewarn "to store ${path} (e.g. EXT3_FS_SECURITY). For kernels version before"
+		ewarn "2.6.33_rc1 SECURITY_FILE_CAPABILITIES must be enabled as well."
+		ewarn
+		ewarn "Falling back to suid now..."
+		chmod u+s ${path}
+	fi
+	return $res
+}
+
+pkg_setup() {
+	if ! use gtk; then
+		ewarn "USE=-gtk disables gtk-based gui called wireshark."
+		ewarn "Only command line utils will be built available"
+	fi
+	if use python; then
+		python_set_active_version 2
+		python_pkg_setup
+	fi
+	# Add group for users allowed to sniff.
+	enewgroup wireshark
+}
+
+src_prepare() {
+	epatch "${FILESDIR}"/${P}-underlinking.patch
+	if use btbb; then
+		cp -r "${EROOT}/usr/share/libbtbb/wireshark/." "${S}/" || die
+		epatch "${S}/plugins/btbb/wireshark-1.8-btbb.patch"
+	fi
+	eautoreconf
+}
+
+src_configure() {
+	local myconf
+
+	if [[ $(gcc-major-version) -lt 3 ||
+		( $(gcc-major-version) -eq 3 &&
+			$(gcc-minor-version) -le 4 ) ]] ; then
+		die "Unsupported compiler version, please upgrade."
+	fi
+
+	if use ares && use adns; then
+		elog "You asked for both, ares and adns, but we can use only one of them."
+		elog "c-ares supersedes adns resolver thus using c-ares (ares USE flag)."
+		myconf="$(use_with ares c-ares) --without-adns"
+	else
+		myconf="$(use_with adns) $(use_with ares c-ares)"
+	fi
+
+	# profile and pie are incompatible #215806, #292991
+	if use profile; then
+		ewarn "You've enabled the 'profile' USE flag, building PIE binaries is disabled."
+		ewarn "Also ignore \"unrecognized option '-nopie'\" gcc warning #358101."
+		append-flags $(test-flags-CC -nopie)
+	fi
+
+	# Workaround bug #213705. If krb5-config --libs has -lcrypto then pass
+	# --with-ssl to ./configure. (Mimics code from acinclude.m4).
+	if use kerberos; then
+		case `krb5-config --libs` in
+			*-lcrypto*)
+				ewarn "Kerberos was built with ssl support: linkage with openssl is enabled."
+				ewarn "Note there are annoying license incompatibilities between the OpenSSL"
+				ewarn "license and the GPL, so do your check before distributing such package."
+				myconf+=" --with-ssl"
+				;;
+		esac
+	fi
+
+	# Hack around inability to disable doxygen/fop doc generation
+	use doc || export ac_cv_prog_HAVE_DOXYGEN=false
+	use doc-pdf || export ac_cv_prog_HAVE_FOP=false
+
+	# dumpcap requires libcap, setuid-install requires dumpcap
+	econf $(use_enable gtk wireshark) \
+		$(use_enable profile profile-build) \
+		$(use_with ssl gnutls) \
+		$(use_with gcrypt) \
+		$(use_enable ipv6) \
+		$(use_with lua) \
+		$(use_with kerberos krb5) \
+		$(use_with smi libsmi) \
+		$(use_with zlib) \
+		$(use_with geoip) \
+		$(use_with portaudio) \
+		$(use_with python) \
+		$(use_with caps libcap) \
+		$(use_with pcap) \
+		$(use_with pcap dumpcap-group wireshark) \
+		$(use pcap && use_enable caps setcap-install) \
+		$(use pcap && use_enable !caps setuid-install) \
+		--sysconfdir="${EPREFIX}"/etc/wireshark \
+		--disable-extra-gcc-checks \
+		${myconf}
+}
+
+src_compile() {
+	default
+	use doc && emake -C docbook
+}
+
+src_install() {
+	default
+	if use doc; then
+		dohtml -r docbook/{release-notes.html,ws{d,u}g_html{,_chunked}}
+		if use doc-pdf; then
+			insinto /usr/share/doc/${PF}/pdf/
+			doins docbook/{{developer,user}-guide,release-notes}-{a4,us}.pdf
+		fi
+	fi
+
+	# FAQ is not required as is installed from help/faq.txt
+	dodoc AUTHORS ChangeLog NEWS README{,.bsd,.linux,.macos,.vmware} \
+		doc/{randpkt.txt,README*}
+
+	insinto /usr/include/wiretap
+	doins wiretap/wtap.h
+
+	if use gtk; then
+		for c in hi lo; do
+			for d in 16 32 48; do
+				insinto /usr/share/icons/${c}color/${d}x${d}/apps
+				newins image/${c}${d}-app-wireshark.png wireshark.png
+			done
+		done
+		domenu wireshark.desktop
+	fi
+	use pcap && chmod o-x "${ED}"/usr/bin/dumpcap #357237
+}
+
+pkg_postinst() {
+	if use caps && use pcap; then
+		fcaps 0:wireshark 550 cap_net_raw,cap_net_admin "${EROOT}"/usr/bin/dumpcap
+	fi
+	echo
+	ewarn "NOTE: To run wireshark as normal user you have to add yourself to"
+	ewarn "the wireshark group. This security measure ensures that only trusted"
+	ewarn "users are allowed to sniff your traffic."
+	echo
+}