Wireshark-dev: Re: [Wireshark-dev] Compiling with or without extcap
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 9 Jan 2018 12:02:23 -0800
For what it's worth, libpcap 1.8 and later don't require that a local interface be openable before listing it in pcap_findalldevs(), so, whilst you might still need dumpcap to *capture* packets, it should be possible to *enumerate* interfaces directly within Wireshark/TShark with libpcap 1.8 and later, as you shouldn't need elevated privileges to enumerate interfaces.  This might speed up the process.