Wireshark-dev: [Wireshark-dev] Windows build result behaves differently from official binary bu

From: Michael Lum <michael.lum@xxxxxxxxxxxxxxxxx>
Date: Thu, 10 Aug 2023 17:23:20 +0000

Hi, I’m building Wireshark 4.0.7 from source without any modifications.

I can build and execute Wireshark with no problems.

 

We were given a 3rd party tool (no source) that is used to view logs produced by an LTE small cell basestation.

The 3rd party tool uses Wireshark to dissect S1AP and “higher” protocols.

The tool looks to be a “rebadged” version of this:  https://help.mikrotik.com/docs/download/attachments/18350127/Intercell%20monitoring.pdf?version=1&modificationDate=1607411802557&api=v2

 

The tool works with Wireshark 3.x.y and 4.0.1, 4.0.6, and 4.0.7 when they are the official builds from the Wireshark website.

The tool will not work with the 4.0.7 (or 3.6.2) version I build from source.

 

I don’t know how the tool “uses” Wireshark.

*** I’m trying to figure out why my build differs from the official build (functionally, not byte for byte).  ***

 

Does anyone have any idea why my build wouldn’t work?

I built as per the Wireshark Developer’s Guide, section 2.2 (No Chocolatey, no Git).

 

This screenshot is when the official build is installed (Help/About details from Wireshark below):  note the 2 right panels are filled out

 

 

 

This screenshot is when my official 4.0.7 build from source is installed (Help/About details below):  again note the 2 right panels

 

 

 

 

My local build of the unadulterated 4.0.7 source:

 

Version 4.0.7-Stock-1 (Git commit 0ad1823cc090).

 

Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.37, build 32822),

with GLib 2.72.3, with PCRE2, with zlib 1.2.12, with Qt 5.15.2, with libpcap,

with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.10.1, with

Kerberos (MIT), with MaxMind, with nghttp2 1.46.0, with brotli, with LZ4, with

Zstandard, with Snappy, with libxml2 2.9.14, with libsmi 0.4.8, with

QtMultimedia, with automatic updates using WinSparkle 0.8.0, with AirPcap, with

SpeexDSP (using bundled resampler), with Minizip, with binary plugins.

 

Running on 64-bit Windows 10 (22H2), build 19045, with Intel(R) Core(TM)

i7-5500U CPU @ 2.40GHz (with SSE4.2), with 7926 MB of physical memory, with GLib

2.72.3, with PCRE2 10.40 2022-04-14, with Qt 5.15.2, with Npcap version 1.71,

based on libpcap version 1.10.2-PRE-GIT, with c-ares 1.18.1, with GnuTLS 3.6.3,

with Gcrypt 1.10.1, with nghttp2 1.46.0, with brotli 1.0.9, with LZ4 1.9.3, with

Zstandard 1.5.2, without AirPcap, with light display mode, without HiDPI, with

LC_TYPE=English_Canada.utf8, binary plugins supported.

 

 

Offical build:

 

Version 4.0.7 (v4.0.7-0-g0ad1823cc090).

 

Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.32, build 31332),

with GLib 2.72.3, with PCRE2, with zlib 1.2.12, with Qt 5.15.2, with libpcap,

with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.10.1, with

Kerberos (MIT), with MaxMind, with nghttp2 1.46.0, with brotli, with LZ4, with

Zstandard, with Snappy, with libxml2 2.9.14, with libsmi 0.4.8, with

QtMultimedia, with automatic updates using WinSparkle 0.8.0, with AirPcap, with

SpeexDSP (using bundled resampler), with Minizip, with binary plugins.

 

Running on 64-bit Windows 10 (22H2), build 19045, with Intel(R) Core(TM)

i7-5500U CPU @ 2.40GHz (with SSE4.2), with 7926 MB of physical memory, with GLib

2.72.3, with PCRE2 10.40 2022-04-14, with Qt 5.15.2, with Npcap version 1.71,

based on libpcap version 1.10.2-PRE-GIT, with c-ares 1.18.1, with GnuTLS 3.6.3,

with Gcrypt 1.10.1, with nghttp2 1.46.0, with brotli 1.0.9, with LZ4 1.9.3, with

Zstandard 1.5.2, without AirPcap, with light display mode, without HiDPI, with

LC_TYPE=English_Canada.utf8, binary plugins supported.

 

Thank you for your help.

 

Michael Lum

 

Michael Lum (michael.lum@xxxxxxxxxxxxxxxxx) | STAR SOLUTIONS | Principal Software Engineer

4600 Jacombs Road, Richmond BC, Canada V6V 3B1 | +1.604.303.2315