.de Sc
\\s-1\\$1\\s0\\$2
..
.ds cA 2007/334
.ds aR \s-1PSARC\s0
.LP
.so ../../amac
.Co
.ds LF \fI\*(aR/\*(cA\fP
.ds RF \fICopyright 2007 Sun Microsystems\fP
.if n .ds CF
.IP \fBSubject:\fP 15
Add Wireshark 0.99.5 into Solaris
.IP "\fBSubmitted by:\fP" 15
Bart Smaalders
.IP \fBFile:\fP 15
\*(aR/\*(cA/opinion.ms
.IP \fBDate:\fP 15
June 13th, 2007
.IP "\fBCommittee:\fP" 15
James D. Carlson,
Kais Belgaied,
Mark Carlson,
Glenn Skinner,
Gary Winiger.
.IP "\fBProduct Approval Committee:\fP" 15

Solaris PAC
.br
solaris-pac-opinion@sun.com

.pn 2
.NH
Summary
.LP
This project integrates Wireshark (the current name for the open
source project better known as "ethereal") into Solaris.  Wireshark
provides network packet capture and display facilities that are, in
general, substantially better than those provided by our native
snoop(1M) utility.
.NH
Decision & Precedence Information
.LP
This project is approved as specified in reference [1-9].
.LP
The project may be delivered in a Minor release of Solaris via the SFW
consolidation.
.NH
Interfaces
.LP
The project exports the following interfaces.
.if n .ne 8
.if t .ne 3
.TS H
box;
c s s
l | l | l.
Interfaces Exported
_
Interface	Classification	Comments
_
.TH
/usr/share/wireshark/	Project Private	Internal configuration
/usr/lib/libwireshark.*	Project Private	Internal library
/usr/lib/libwiretap.*	Project Private	Internal library
/usr/lib/wireshark/	Project Private	Plugins
/usr/sbin/editcap	Uncommitted	Binary location
/usr/sbin/capinfos	Uncommitted	Binary location
/usr/sbin/text2pcap	Uncommitted	Binary location
/usr/sbin/tshark	Uncommitted	Binary location
/usr/sbin/wireshark	Uncommitted	Binary location
/usr/sbin/mergecap	Uncommitted	Binary location
/usr/sbin/dumpcap	Uncommitted	Binary location
Command lines and output	Volatile
Old file formats	Committed
SUNWwireshark	Uncommitted	Main package
SUNWwiresharkgui	Uncommitted	Graphical interface
libpcap.a	Project Private	Internal static library
.TE
.LP
The project imports the following interfaces.
.if n .ne 8
.if t .ne 3
.TS H
box;
c s s
l | l | l.
Interfaces Imported
_
Interface	Classification	Comments
_
.TH
/usr/share/applications/	Committed	LSARC 2006/462
/usr/share/pixmaps/	Committed
libXfixes.so.1	Volatile	PSARC 2004/318, 2006/702
libXrandr.so.2	Volatile	PSARC 2004/187
libXrender.so.1	Volatile	LSARC 2001/125
libatk-1.0.so.0	Stable	LSARC 2006/202
libcairo.so.2	Volatile	LSARC 2006/202
libexpat.so.0	Volatile	LSARC 2007/378
libfontconfig.so.1	Volatile
libfreetype.so.6	Volatile	LSARC 2002/291
libgcrypt.so.11	Volatile	LSARC 2006/202
libgdk-x11-2.0.so.0	Stable	LSARC 2006/202
libgdk_pixbuf-2.0.so.0	Stable	LSARC 2006/202
libglib-2.0.so.0	Stable	LSARC 2006/202
libgmodule-2.0.so.0	Stable	LSARC 2006/202
libgnutls.so.11	Volatile	LSARC 2006/202
libgobject-2.0.so.0	Stable	LSARC 2006/202
libgpg-error.so.0	Volatile	LSARC 2006/202
libgtk-x11-2.0.so.0	Stable	LSARC 2006/202
libnetsnmp.so.5	Stable	LSARC 2003/103
libpango-1.0.so.0	Stable	LSARC 2006/202
libpangocairo-1.0.so.0	Stable	LSARC 2006/202
libpangoft2-1.0.so.0	Stable	LSARC 2006/202
libpng12.so.0	Volatile	LSARC 2006/202
libz.so.1	Committed	PSARC 2006/537
.TE
.NH
Opinion
.LP
.NH 2
File Format Commitment
.LP
Several ARC members asked about the supported file formats.  After
discussion with the submitter, we agreed that the list of supported
formats can be volatile, but that the project has a commitment to read
old formats.
.NH 2
Volatile Libraries
.LP
During review, one member noted that libcrypto and GNU TLS will
require contracts.  However, subsequent updates from the project team
have removed the libcrypto usage, and the project intends to integrate
via the SFW consolidation along with GNU TLS.  Based on this update,
no contracts have been presented.
.NH 2
Rights Profiles
.LP
One member asked about rights profiles required to make tshark and
wireshark work on Solaris.  The project team updated the materials to
include rights profile entries for these two programs in the "Network
Management" profile with the least privilege necessary
(net_rawaccess).
.NH 2
Snoop Obsolescence
.LP
The integration of wireshark effectively makes snoop
obsolete, and turns it into a burden both for support and for future
networking projects that may be required to provide both snoop and
wireshark enhancements.
.LP
Accordingly, several ARC members asked about the project team's
intended direction for snoop.  After discussing this issue with the
project team, the ARC members agreed that the resource allocation
required to obsolete snoop and remove it from the system is an issue
that needs to be addressed by management.  This issue led to the
advisory information listed below.
.NH
Minority Opinion(s)
.LP
None.
.NH
Advisory Information
.LP
The ARC advises Solaris management and the Solaris PAC to raise the
priority of an effort to remove the snoop utility from Solaris
and OpenSolaris.  The ARC members plan to direct and approve future
projects with the assumption that snoop removal is the intended
direction, but may need to revisit this issue (likely at substantial
expense and inconvenience to other project teams) if prompt action is
not taken.
.NH
Appendices
.NH 2
Appendix A: Technical Changes Required
.LP
None.
.NH 2
Appendix B: Technical Changes Advised
.LP
None.
.NH 2
Appendix C: Reference Material
.LP
Unless stated otherwise, path names are relative to the case
directory \*(aR/\*(cA.
.IP 1.
Wireshark project description
.br
File:
wireshark2.txt
.IP 2.
capinfos(1)
.br
File:
man/capinfos.1
.IP 3.
dumpcap(1)
.br
File:
man/dumpcap.1
.IP 4.
editcap(1)
.br
File:
man/editcap.1
.IP 5.
mergecap(1)
.br
File:
man/mergecap.1
.IP 6.
text2pcap(1)
.br
File:
man/text2pcap.1
.IP 7.
tshark(1)
.br
File:
man/tshark.1
.IP 8.
wireshark-filter(4)
.br
File:
man/wireshark-filter.4
.IP 9.
wireshark(1)
.br
File:
man/wireshark.1