General question for the project team (not really an issue for *this* case):
Does it make sense to someday convert snoop to use libpcap? (Anyone
know if there is packet capture functionality in snoop that libpcap
*can't* provide?) (ISTR also that snoop was potentially headed for the
axe, as ARC seemed to feel that wireshark was a superior option. Did we
ever actually contemplate a real EOF for snoop?)
-- Garrett
Sebastien Roy wrote:
> I'm submitting this fast-track for Sagun Shakya. The timer is set for
> May 5th, 2008.
>
> Integrate libpcap
>
> Release binding: Patch
>
> Target Consolidation: SFW
>
> 1. Summary
>
> libpcap is an open source user-level library that provides a high
> level packet capture interface. This project proposes to integrate
> libpcap version 0.9.8 plus additional changes specific to Solaris
> which causes libpcap to use libdlpi in order to be interoperable
> with Clearview Vanity Naming. These libdlpi changes have been
> integrated into the upstream public domain sources and therefore
> will be available in future releases of libpcap.
>
> Known applications that are dependent upon libpcap are Wireshark,
> tcpdump, snort, ngrep, and ntop.
>
> 2. Exported Interfaces
>
> All interfaces provided by libpcap are Uncommitted and are listed
> in the pcap.3 man page included in the case directory.
>
> 3. Imported Interfaces
>
> The version of libpcap being integrated by this project uses the
> libdlpi API defined in PSARC 2006/436. Its stability is Committed.
>
> 4. Packaging & Delivery
>
> SUNWlibpcap
>
> /usr/lib/libpcap.so.0.9.8
> /usr/lib/libpcap.so -> /usr/lib/libpcap.so.0.9.8
> /usr/include/pcap.h
> /usr/include/pcap-bpf.h
> /usr/include/pcap-namedb.h
> /usr/share/man/man3/pcap.3
>
> 64-bit libraries:
>
> /usr/lib/sparcv9/libpcap.so.0.9.8
> /usr/lib/sparcv9/libpcap.so -> /usr/lib/sparcv9/libpcap.so.0.9.8
> /usr/lib/amd64/libpcap.so.0.9.8
> /usr/lib/amd64/libpcap.so -> /usr/lib/amd64/libpcap.so.0.9.8
>
> 5. Reference Documents:
>
> http://www.tcpdump.org/
> http://sourceforge.net/projects/libpcap/
> PSARC 2007/334 Add Wireshark 0.99.5 into Solaris
>
>
>
