Wireshark · Wireshark-users: Re: [Wireshark-users] Crosscompiling TSHARK to run on embedded linux on ppc440!

[Guy Harris <guy@xxxxxxxxxxxx>]

On Feb 8, 2009, at 8:19 PM, H Aslam wrote:

> will try again... but not sure what I will end up with "size wise"..  
> I assume that tshark will not fit on a ramdisk image?

It depends on how big your ramdisk is.

These are not exactly comparable, as I'm doing this on an x86 Mac, so  
there are Linux-vs-Mac OS X and PPC-vs-x86 differences - and you might  
be able to shrink things by statically linking - but the GLib shared  
library (and libgmodule, which goes along with it), the shared library  
containing the Wireshark/TShark dissectors, and the library that reads  
capture files, are:

	   bytes	library
	 1064196	libglib-2.0.0.dylib
	   19980	libgmodule-2.0.0.dylib
	32155400	libwireshark.dylib
	  301544	libwiretap.dylib

TShark itself is:

	   bytes	program
	  201860	tshark

I can't guarantee that you won't need other libraries as well, such as  
libpcap:

	   bytes	library
	  767824	/usr/lib/libpcap.dylib