Dear Maintainer,


since libpcap 1.9, rpcap (remote-pcap) is supported [1] and can
be enabled at build by specifying --enable-remote or in cmake
-DENABLE_REMOTE=YES [2].

Please consider enabling this for libpcap 1.9.



[1] https://github.com/the-tcpdump-group/libpcap/issues/266#issuecomment-617655700
[2] https://github.com/the-tcpdump-group/libpcap/issues/795#issuecomment-455824284

Hi,

Thank you for the suggestion. Having rpcapd packaged for Debian and
having remote capture support in libpcap could be useful in some
situations, however I'm not sure that the code is supposed to be
production-ready just yet.

Guy, do you think it's generally safe to enable remote capture in
Debian's packaged libpcap?

Thanks,

hi

Could this get picked up? I've used a port for Linux separately before,
but that one will no longer be maintained:
<https://github.com/rpcapd-linux/rpcapd-linux/pull/9>.

Let me know if and how I can help out with this.

Kind regards

Peter Vanpoucke

hi

Could this get picked up? I've used a port for Linux separately before,
but that one will no longer be maintained:
<https://github.com/rpcapd-linux/rpcapd-linux/pull/9>.

Let me know if and how I can help out with this.

Kind regards

Peter Vanpoucke

Hi,

I will look into it.

Thanks.

Attached is a patch to build it with rpcapd support and the rpcapd
binary. I am mostly interested in getting wireshark built against it
because I am using network equipment (Lancom) which supports it as a
capturing protocol.