Wireshark · Wireshark-dev: Re: [Wireshark-dev] rpcap support seems to have disappeared ...

[Guy Harris <guy@xxxxxxxxxxxx>]

On Nov 11, 2017, at 11:06 AM, Richard Sharpe <realrichardsharpe@xxxxxxxxx> wrote:

> Sure. The immediate problem though is that acinclude.m4 assumes that
> checking for pcap_open is sufficient and required to enable
> HAVE_PCAP_REMOTE.

If you don't have pcap_open(), you probably don't have remote support, which is why it's required.

I suppose it isn't "sufficient" in the sense that one could, in principle, build a version of libpcap that has pcap_open() but that only supports local capture, but that's rather unlikely.

> Having hacked my way around that, it is clear from the resulting build
> failures that a more recent version of libpcap is required :-(

That's the universe's way of telling you that perhaps, sometimes, you should trust that autotools knows what it's doing, and not try to hack around it. :-)