On Sat, 1 Mar 2025 10:28:21 +0100 Stephen Hemminger <step...@networkplumber.org> wrote:
> Last time I looked at that code it was really ugly, and messy. But > more of importantly it was the wrong use case. Very few users will > want to have a NIC dedicated to capture only. > > The whole thing should be rewritten so that tcpdump/ Wireshark can > run as secondary process using existing pdump API. Thank you for looking Stephen. In case there is a volunteer to fix this at some time, this could be a useful starting point for them. You are welcome to update the bug report [1] if you think this would help. 1: https://github.com/the-tcpdump-group/libpcap/issues/1159 -- Denis Ovsienko