SW: drop tshark + wireshark from GRML_FULL