Up to wireshark-1.10.1, wireshark could be built with USE="-gtk" to avoid requiring any X11 dependancies and installing only 'tshark', the the command-line version of the tool. However, wireshark-1.10.1-r1 uses the '^^' USE-flag operator which means that "gtk2" or "gtk3" or "qt" *must* be specified. This appears to be an oversight, as there are still code-paths for having none of these options selected. A single-line fix which still allows wireshark-1.10.1-r1/tshark to be built without X dependancies is to replace '^^' with '??': --- /usr/portage/net-analyzer/wireshark/wireshark-1.10.1-r1.ebuild 2013-08-03 17:31:24.000000000 +0100 +++ wireshark-1.10.1-r1.ebuild 2013-08-04 18:31:07.538712479 +0100 @@ -18,7 +18,7 @@ +netlink +pcap portaudio qt4 selinux smi ssl zlib " REQUIRED_USE=" - ^^ ( gtk2 gtk3 qt4 ) + ?? ( gtk2 gtk3 qt4 ) ssl? ( crypt ) "
*** This bug has been marked as a duplicate of bug 479692 ***