I have both app-arch/rpm and dev-vcs/git installed. In wireshark's CMakeLists.txt file, the logic for assuming the build is from a git checkout and targeting RPM package is flawed: CMakeLists.txt Line 3024: # This will fail if we're not building from a git checkout. if(RPMBUILD_EXECUTABLE AND GIT_EXECUTABLE) ... Here, RPMBUILD_EXECUTABLE and GIT_EXECUTABLE just check for the availability of the rpmbuild and git commands. Just as the comment predicts, this fails for the ebuild. Disabling that code path by changing the IF line to if(RPMBUILD_EXECUTABLE AND GIT_EXECUTABLE and FALSE) makes wireshark compile again. Of course a proper test, or a user-supplied flag, should better be used.
Fixed without revision bump.