Lets see:
This suggests this, which says this, which includes tshark. So that's how it's supposed to work I guess. Better ask the Yocto packagers how this is supposed to work, the Wireshark project doesn't maintain that.
