libpcap1 - A Library for Network Sniffers

Distribution: openSUSE 42.2
Repository: j.eng all
Package name: libpcap1
Package version: 1.5.3
Package release: 8.2
Package architecture: x86_64
Package type: rpm
Installed size: 336.14 KB
Download size: 139.16 KB
Official Mirror:
libpcap is a library used by packet sniffer programs. It provides an interface for them to capture and analyze packets from network devices. This package is only needed if you plan to compile or write such a program yourself.



  • libpcap = 1.5.3
  • libpcap1 = 1.5.3-8.2
  • libpcap1(x86-64) = 1.5.3-8.2
  • libpcap1(xfrm) = 1.5.3-8.2


  • libpcap < 1.5.3


    Install Howto

    1. Add the j.eng repository:
      # zypper addrepo j.eng
    2. Install libpcap1 rpm package:
      # zypper install libpcap1


    • /usr/lib64/
    • /usr/lib64/
    • /usr/share/doc/packages/libpcap1/CHANGES
    • /usr/share/doc/packages/libpcap1/CREDITS
    • /usr/share/doc/packages/libpcap1/LICENSE
    • /usr/share/doc/packages/libpcap1/README
    • /usr/share/doc/packages/libpcap1/README.linux
    • /usr/share/doc/packages/libpcap1/TODO
    • /usr/share/man/man7/pcap-filter.7.gz
    • /usr/share/man/man7/pcap-linktype.7.gz
    • /usr/share/man/man7/pcap-tstamp.7.gz


    2016-05-06 - - add missing DLT_INFINIBAND to dlt_choices table (fate#319438, bsc#992262) * add libpcap-add_DLT_INFINIBAND_to_dlt_choices.patch

    2015-08-28 - - libpcap-userspace-filter.patch: do not apply userspace filter until VLAN tag is reconstructed (bsc#874131) - libpcap-use-tpid-2.patch libpcap-use-tpid.patch: use TPID value passed by kernel rather than wild-guess 802.1Q (bsc#874131) - libpcap-8021ad-tpid.patch: in "vlan" filter BPF code, check also for 802.1ad (0x88a8) TPID in addition to 802.1Q (0x8100) and non-standard 0x9100 Q-in-Q (bsc#874131)

    2014-04-24 - - remove dependency on gpg-offline (blocks rebuilds and tarball integrity is checked by source-validator anyway)

    2014-02-13 - - added support for netlink (bnc#863823) * libpcap-netlink.patch

    2014-02-13 - - update to 1.5.3 * Don't let packets that don't match the current filter get to the application when TPACKET_V3 is used. (GitHub issue #331) * Fix handling of pcap_loop()/pcap_dispatch() with a packet count of 0 on some platforms (including Linux with TPACKET_V3). (GitHub issue #333) * Work around TPACKET_V3 deficiency that causes packets to be lost when a timeout of 0 is specified. (GitHub issue #335) * Man page formatting fixes. - refreshed libpcap-1.5.2-filter-fix.patch

    2013-12-14 - - update to 1.5.2 Version 1.5.0 revised for non-code related edits Version, 1.5.1 revised for for interop against Linux 3.1.0 * TPACKET_V3 support added for Linux * Point users to the the-tcpdump-group repository on GitHub rather than the mcr repository * Checks added for malloc()/realloc()/etc. failures * Support filtering filtering E1 SS7 traffic on MTP2 layer Annex A * Use "ln -s" to link man pages by default * Added pcap_open_dead_with_tstamp_precision API interface. * Many changes to autoconf to deal better with non-GCC compilers added many new DLT types - require pkg-config for devel library support detection - add support for D-Bus capture - modified patches for upstream changes: * libpcap-ocloexec.patch * libpcap-1.0.0-filter-fix.patch to libpcap-1.5.2-filter-fix.patch

    2013-09-13 - - update to 1.4.0: * add netfilter/nfqueue interface * support IPv6 filter expressions when no IPv6 address resolution availavle * Fix pcap-config to include -lpthread if canusb support is present * Try to fix "pcap_parse not defined" problems when --without-flex and --without-bison are used when you have Flex and Bison * Fix some issues with the pcap_loop man page. * Fix pcap_getnonblock() and pcap_setnonblock() to fill in the supplied error message buffer * Fix typo that, it appeared, would cause pcap-libdlpi.c not to compile (perhaps systems with libdlpi also have BPF and use that instead) * Catch attempts to call pcap_compile() on a non-activated pcap_t * Fix crash on Linux with CAN-USB support without usbfs * Fix addition of VLAN tags for Linux cooked captures * Check for both EOPNOTSUPP and EINVAL after SIOCETHTOOL ioctl, so that the driver can report either one if it doesn't support SIOCETHTOOL * Add DLT_INFINIBAND and DLT_SCTP * Describe "proto XXX" and "protochain XXX" in the pcap-filter man page * Handle either directories, or symlinks to directories, that correspond to interfaces in /sys/class/net * Fix handling of VLAN tag insertion to check, on Linux 3.x kernels, for VLAN tag valid flag * Clean up some man pages * Support libnl3 as well as libnl1 and libnl2 on Linux - packaging changes: * build with libnl * refresh libpcap-ocloexec.patch for upstream changes * verify source signatures

    2012-08-27 - - BuildRequire libusb-devel for "usb sniffing"

    2012-08-27 - - Added libpcap-ocloexec.patch: Use O_CLOEXEC in all internal fds so they do not leak on fork()..execve()