I have been working on packaging Wireshark for U3 devices - basically
a more intelligent USB device - see http://www.u3.com/.
It allows you to run applications, in this case Wireshark, from your
USB device without having to install Wireshark onto the machine
(though it does copy some files across). It also allows you to keep
your Wireshark config on the device - so when you run Wireshark from
the device - you get all your preferred settings. I find this a very
useful way of working.
The packaging is basically a zip file with a manifest file, and it was
straight-forward to get Wireshark up and running on a U3 device (just
a couple of filesystem.c changes).
I have developed a prototype 'packaging/u3' tree with a makefile.nmake
that builds a U3 package that can then be installed on the device. It
shows that wireshark works on a u3 device but doesn't yet do all the
housekeeping tasks. It also currently needs WinPcap to be installed on
Anyway, just thought I'd flag this and get some feedback.