Bugzilla Bug 167110

Please find attached libpcap-pfring-0.9.4-r1.ebuild,
libpcap-0.9.3-whitespace.diff, and libpcap-0.8.1-fPIC.patch.

libpcap-pfring is an ebuild for a PF_RING enabled version of libpcap for use
with libpfring and a PF_RING enabled kernel. This ebuild is is a modified
version of the current libpcap-0.9.4 ebuild. libpcap-0.9.3-whitespace.diff and
libpcap-0.8.1-fPIC.patch are the same patches applied in the current
libpcap-0.9.4 ebuild and need to be added to the files dir of this package.


Libpcap-pfring-0.9.4-r1 is dependent on libpfring-3.2.1-r1 (Bug 167108). This
version of libpcap should provide virtual/libpcap and will need a virtual added
for it. Any other version of libpcap should block installation of
libpcap-pfring. 

This should go in net-libs/libpcap-pfring and should be hard masked until I'm
able to provide updates to the ebuilds of a number of packet capture apps
(snort, tcpdump, etc...). I have updates to snort and tcpdump ready and will
open bugs for them when both libpfring and libpcap-pfring are added to portage.

Wally

Created an attachment (id=110334) [details]
libpcap-pfring-0.9.4-r1.ebuild

attached libpcap-pfring-0.9.4-r1.ebuild

Created an attachment (id=110336) [details]
libpcap-0.9.3-whitespace.diff

attached libpcap-0.9.3-whitespace.diff

Created an attachment (id=110340) [details]
libpcap-0.8.1-fPIC.patch

attached libpcap-0.8.1-fPIC.patch

same reason as in bug 117898 applies here

Feel free to reopen once upstream has supported tarballs in place, marking
LATER until then

Though appreciate that you still take care of it :) It's just that netmon is
short on helping / supporting hands atm

Well and since the code for passing packet through mmap is now included in
upstream >libpcap-1.0.0 could somebody give me any hint, why there are updates
(libpcap-0.9.8.20081022.tar.gz) on http://public.lanl.gov/cpw/ and do we
actually need that still?

And well, if yes, comment please in bug 208702 since I already asked
treecleaners to work on libpcap-ringbuffer.

(In reply to comment #6)
> And well, if yes, comment please in bug 208702 since I already asked
> treecleaners to work on libpcap-ringbuffer.
> 

pfring
phill woods libpcap (libpcap-ringbuffer)
mmap

Are all very different.

I would say that this bug can be closed, because it is unlikely the pfring
people will start releasing tarballs or try and get it included in the kernel
(pfring requires a kernel module). Those are the major show stoppers for a
pfring version of libpcap in portage.

As for libpcap-ringbuffer. This is used in a lot of IDS environments. I have an
ebuild I have been using for the latest version of this. I'll submit it when I
have some time.