add wireshark

.docker_func

@@ -76,3 +76,15 @@ metasploit(){
     --name metasploit \
     infoslack/metasploit
 }
+
+wireshark(){
+  del_stopped wireshark
+
+  docker run -d \
+    --name wireshark \
+    --net=host --privileged \
+    -e DISPLAY=unix$DISPLAY \
+    -v /tmp/.X11-unix:/tmp/.X11-unix \
+    -v ~/.docker-volumes/wireshark/pcap:/pcap \
+    wireshark
+}

wireshark/Dockerfile

@@ -0,0 +1,16 @@
+FROM debian:jessie
+
+MAINTAINER Daniel Romero <infoslack@gmail.com>
+
+ENV DEBIAN_FRONTEND noninteractive
+RUN apt-get update && \
+    apt-get install -y wireshark && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN dbus-uuidgen > /etc/machine-id
+COPY init.lua /usr/share/wireshark/init.lua
+
+RUN ldconfig
+RUN mkdir /pcap
+
+CMD ["wireshark"]

wireshark/README.md

@@ -0,0 +1,14 @@
+wireshark
+=========
+
+Docker image for [Wireshark](https://www.wireshark.org/)
+
+Usage:
+```
+$ docker run -d \
+	--net=host --privileged \
+	-e DISPLAY=unix$DISPLAY \
+	-v /tmp/.X11-unix:/tmp/.X11-unix \
+	-v $(pwd)/pcap:/pcap \
+	infoslack/wireshark
+```