Wireshark-dev: Re: [Wireshark-dev] Compiling with or without extcap
From: Guy Harris <[email protected]>
Date: Tue, 9 Jan 2018 12:02:23 -0800
For what it's worth, libpcap 1.8 and later don't require that a local interface be openable before listing it in pcap_findalldevs(), so, whilst you might still need dumpcap to *capture* packets, it should be possible to *enumerate* interfaces directly within Wireshark/TShark with libpcap 1.8 and later, as you shouldn't need elevated privileges to enumerate interfaces.  This might speed up the process.