This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Distribution of Wireshark tool ver 1.6.14 in our product CD as a separate installable

0

Question 1: I would like to know what are the legal and other bindings/agreements if we have to bundle Wireshark tool ver 1.6.14 in our product CD as a separate installable?, But we will not install it as part of the product.

Question 2: Are there any licensing restrictions/bindings that will prevent us from installing/redistributing the wireshark product on our customer sites/locations?

This question is marked "community wiki".

asked 11 Jul '13, 22:58

ajays's gravatar image

ajays
11112
accept rate: 0%

edited 14 Jul '13, 10:50

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


One Answer:

2

Please read the answers to similar questions.

http://ask.wireshark.org/questions/10806/could-the-wireshark-analyzer-be-used-in-the-textbook-cd
http://ask.wireshark.org/questions/11553/company-usage-confirmation
http://ask.wireshark.org/questions/12371/wireshark-plugin-and-gpl-license

Long story short: Yes, you can distribute Wireshark as part of your CD, as long as you follow the rules of the GPL license

UPDATE

Just a few more hints (simplified version of the GPL - as I understand it).

You can use/distribute Wireshark, even in a commercial environment

  • as long as you don't modify the product and you make clear that it is an open source product and not your product (e.g. don't make it look like it is your product by replacing icons/texts with company icons/texts and the like)
  • if you extend the functionality of the product you must make the code changes publicly available, if you distribute or sell the modified product
  • if use code of the product to build/extend your own products, you must make the code of your own products publicly available, if you distribute or sell that product
  • If you use the product only internally (no selling, no distribution, no making available in any sense), you can change the product however you like, without the need to make those changes publicly available.

Regards
Kurt

One more GPL hint:

  • You must allow anybody who receives the version of Wireshark on your product CD to give away that version of Wireshark to anybody they want, including people who haven't purchased your product, and must allow them to give away the source to that version of Wireshark. (This will NOT, as far as I know, require you to give away the source to your own software on the same CD, as bundling Wireshark with that software will, I think, count as "mere aggregation" of the two pieces of software, to use the term used in the GPL. However, I am not a lawyer, so, as per Kurt's suggestion, you should ask your corporate lawyers about all this.

Guy Harris

answered 12 Jul '13, 00:43

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 14 Jul '13, 10:54

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196

Thank you for the reply, Kurt.

(12 Jul '13, 03:19) ajays

You are welcome!

HINT: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions.

(12 Jul '13, 03:47) Kurt Knochner ♦

I think the expression, "publicly available" is misleading. You only need to make your modifications available to whom you distribute it and not [necessarily] to the general public per se ... at least that is how I understand it, but IANAL.

From http://www.gnu.org/licenses/gpl-faq.html#GPLRequireSourcePostedPublic:

But if you release the modified version to the public in some way, the GPL requires you to make the modified source code available to the program's users, under the GPL. [emphasis added]

(12 Jul '13, 17:36) cmaynard ♦♦

I'm pretty sure that the progam's users is not limited the those how actually use it, but to those who could use it.

Reason:

Cite from the link you posted:

GPLv2 says that modified versions, if released, must be “licensed … to all third parties.” **Who are these third parties**? (#TheGPLSaysModifiedVersions)
Section 2 says that modified versions you distribute must be licensed to all third parties under the GPL. “All third parties” means absolutely everyone — but this does not require you to *do* anything physically for them. It only means they have a license from you, under the GPL, for your version. </code></pre><p>So, <strong>if you release</strong> a modified version, you <strong>must</strong> license that version to <strong>absolutely everyone</strong>. 'Licensing' (in the context of GPL) means also access to the full source code.</p><p>Secondly, there is an organization called <a href="http://www.gpl-violations.org/">GPL violations</a>. They track the use of GPL code in commercial projects. Then they ask those companies to disclose the whole source code <strong>to the public</strong>. If they deny that, they will be sued. GPL violations has already won some law suits, despite the term above: <code>but this does not require you to *do* anything physically for them.</code>. As I understand it: In the cases they won, the companies were forced to disclose the code, at least upon request, to everybody who wanted to see the code.</p></div><div id="comment-22925-info" class="comment-info"><span class="comment-age">(12 Jul '13, 23:11)</span> <span class="comment-user userinfo">Kurt Knochner ♦</span></div></div><span id="22927"></span><div id="comment-22927" class="comment"><div id="post-22927-score" class="comment-score"></div><div class="comment-text"><p>Well, I'm not questioning the license itself - that carries forward to whoever receives the program - I'm only questioning the requirement that you must disclose source code to the general public. The general public includes people who have never even obtained your GPL'd software, thus there can't be any requirement to make your source code available to any of those people, can there?</p><p>Section 3 of <a href="https://gnu.org/licenses/old-licenses/gpl-2.0.txt">GPLv2</a> covers source code distribution, including to third parties, and I don't see any mention of any requirement to disclose the source code to the entire general public in that section. According to 3b, you could, for example, distribute it to any third party (for a possible distribution fee) if they ask for it within 3 years. After 3 years, there wouldn't appear to be any obligation whatsoever.</p><p>I'm sure GPL violations have sued and won some lawsuits. Call me lazy, but I'm not going to spend any time researching any specific cases. I'll leave that as an exercise for the reader. ;)</p></div><div id="comment-22927-info" class="comment-info"><span class="comment-age">(13 Jul '13, 08:51)</span> <span class="comment-user userinfo">cmaynard ♦♦</span></div></div><span id="22932"></span><div id="comment-22932" class="comment not_top_scorer"><div id="post-22932-score" class="comment-score"></div><div class="comment-text"><p>The <a href="http://www.gnu.org/licenses/gpl-faq.html#GPLRequireSourcePostedPublic">"Does the GPL require that source code of modified versions be posted to the public?"</a> question in <a href="http://www.gnu.org/licenses/gpl-faq.html">the GPL FAQ</a> says:</p><blockquote><p><strong>Does the GPL require that source code of modified versions be posted to the public? (#GPLRequireSourcePostedPublic)</strong></p><p>The GPL does not require you to release your modified version, or any part of it. You are free to make modifications and use them privately, without ever releasing them. This applies to organizations (including companies), too; an organization can make a modified version and use it internally without ever releasing it outside the organization.</p><p>But <em>if</em> you release the modified version to the public in some way, the GPL requires you to make the modified source code available to the program's users, under the GPL.</p><p>Thus, the GPL gives permission to release the modified program in certain ways, and not in other ways; but the decision of whether to release it is up to you.</p></blockquote></div><div id="comment-22932-info" class="comment-info"><span class="comment-age">(13 Jul '13, 11:55)</span> <span class="comment-user userinfo">Guy Harris ♦♦</span></div></div><span id="22936"></span><div id="comment-22936" class="comment not_top_scorer"><div id="post-22936-score" class="comment-score"></div><div class="comment-text"><blockquote><p>According to 3b, you could, for example, distribute it to any third party (for a possible distribution fee) if they ask for it within 3 years. <strong>After 3 years, there wouldn't appear to be any obligation whatsoever</strong>.</p></blockquote><p>The GPL says:</p><pre><code>6. Conveying Non-Source Forms.

You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways:

a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange.
b) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by a written offer, valid for at least three years and valid for as long as you offer spare parts or customer support for that product model, to give anyone who possesses the object code either (1) a copy of the </code></pre><p>Sounds like more than 3 years to me.</p><p>Anyway, the GPL is a beast and there is more than one point of view of what is the right interpretation and what is not, and I'm not exactly a GPL expert ;-))</p></div><div id="comment-22936-info" class="comment-info"><span class="comment-age">(13 Jul '13, 16:00)</span> <span class="comment-user userinfo">Kurt Knochner ♦</span></div></div><span id="22949"></span><div id="comment-22949" class="comment not_top_scorer"><div id="post-22949-score" class="comment-score"></div><div class="comment-text"><p>UPDATE: GPL violations announced another trial they won (although according to german law).</p><blockquote><p><a href="http://gpl-violations.org/news/20130626-fantec_judgement.html">http://gpl-violations.org/news/20130626-fantec_judgement.html</a></p></blockquote><p>In the article, there is a link to the FSFE (FSF Europe) with some tips for vendors that use GPL code.</p><blockquote><p><a href="https://fsfe.org/activities/ftf/useful-tips-for-vendors.en.html">https://fsfe.org/activities/ftf/useful-tips-for-vendors.en.html</a><br />

http://gpl-violations.org/faq/vendor-faq.html (similar)

The also mention the phrase 'source code available to the users', without a clear definition who the users are. Actual users of the product (who paid for the physical product or the binary) or absolutely everybody who 'would' be able to use the product.

Anyway, I guess the OP will consult its legal counsel to clarify all this before they ship Wireshark on their product CD in order not to get in conflict with the GPL and with gpl-violations.org ;-

(14 Jul '13, 04:20) Kurt Knochner ♦
showing 5 of 8 show 3 more comments