Please find attached libpcap-pfring-0.9.4-r1.ebuild, libpcap-0.9.3-whitespace.diff, and libpcap-0.8.1-fPIC.patch. libpcap-pfring is an ebuild for a PF_RING enabled version of libpcap for use with libpfring and a PF_RING enabled kernel. This ebuild is is a modified version of the current libpcap-0.9.4 ebuild. libpcap-0.9.3-whitespace.diff and libpcap-0.8.1-fPIC.patch are the same patches applied in the current libpcap-0.9.4 ebuild and need to be added to the files dir of this package. Libpcap-pfring-0.9.4-r1 is dependent on libpfring-3.2.1-r1 (Bug 167108). This version of libpcap should provide virtual/libpcap and will need a virtual added for it. Any other version of libpcap should block installation of libpcap-pfring. This should go in net-libs/libpcap-pfring and should be hard masked until I'm able to provide updates to the ebuilds of a number of packet capture apps (snort, tcpdump, etc...). I have updates to snort and tcpdump ready and will open bugs for them when both libpfring and libpcap-pfring are added to portage. Wally
Created attachment 110334 [details] libpcap-pfring-0.9.4-r1.ebuild attached libpcap-pfring-0.9.4-r1.ebuild
Created attachment 110336 [details, diff] libpcap-0.9.3-whitespace.diff attached libpcap-0.9.3-whitespace.diff
Created attachment 110340 [details, diff] libpcap-0.8.1-fPIC.patch attached libpcap-0.8.1-fPIC.patch
same reason as in bug 117898 applies here Feel free to reopen once upstream has supported tarballs in place, marking LATER until then Though appreciate that you still take care of it :) It's just that netmon is short on helping / supporting hands atm
Well and since the code for passing packet through mmap is now included in upstream >libpcap-1.0.0 could somebody give me any hint, why there are updates (libpcap-0.9.8.20081022.tar.gz) on http://public.lanl.gov/cpw/ and do we actually need that still?
And well, if yes, comment please in bug 208702 since I already asked treecleaners to work on libpcap-ringbuffer.
(In reply to comment #6) > And well, if yes, comment please in bug 208702 since I already asked > treecleaners to work on libpcap-ringbuffer. > pfring phill woods libpcap (libpcap-ringbuffer) mmap Are all very different. I would say that this bug can be closed, because it is unlikely the pfring people will start releasing tarballs or try and get it included in the kernel (pfring requires a kernel module). Those are the major show stoppers for a pfring version of libpcap in portage. As for libpcap-ringbuffer. This is used in a lot of IDS environments. I have an ebuild I have been using for the latest version of this. I'll submit it when I have some time.
