Wireshark · Wireshark-dev: Re: [Wireshark-dev] Compiling with or without extcap

[Guy Harris <guy@xxxxxxxxxxxx>]

For what it's worth, libpcap 1.8 and later don't require that a local interface be openable before listing it in pcap_findalldevs(), so, whilst you might still need dumpcap to *capture* packets, it should be possible to *enumerate* interfaces directly within Wireshark/TShark with libpcap 1.8 and later, as you shouldn't need elevated privileges to enumerate interfaces.  This might speed up the process.