brsc2909/extshark

Web-based packet decoder

ExtShark

simple web interface for tshark

Install (tested on UBUNTU 16.04 with apache2, php7.0)

• make sure you have apache php and tshark installed and up to date. sudo apt-get install apache2 tshark php7.0
• clone repository onto your machine with git clone https://github.com/brsc2909/extshark.git
• navigate into directory with cd extshark
• run the install script as root sudo ./INSTALL or just ./INSTALL if you are already root
• restart apache with sudo service apache2 restart
• you can check that it is installed correctly by going to localhost/extshark default username: admin passwor: password once you have everything working these should be changed by using sudo htpasswd /etc/extshare/htpasswd.users admin and then enter your new password. you can add a new user with the same command swapping admin for your username.
  (note: if you change the name of the alias then the command will be
  sudo htpasswd /etc//htpasswd.users admin).

Custom install

• if you want to call your application something else you can edit the "install.conf" file with any text editor and then change the variable ALIAS e.g ALIAS='NewName'
• to change the root directory edit WEBROOT='/your/new/directory' (note: do not put a "/" at the end of the path")
• to change the config directory where your password file is held edit ETC='/your/new/configDir'.

Configure tshark to run as non-root user

sudo groupadd wireshark
sudo usermod -a -G wireshark <user>
sudo dpkg-reconfigure wireshark-common Type yes when asked.