tcpdump mailing list archives

Re: RFC: a loadable plugin framework for external capture backends


From: Michael Richardson <mcr () sandelman ca>
Date: Fri, 09 Oct 2026 14:29:08 +0200


    >> 1) Michael's proposal doesn't involve as much effort to avoid
    >> malicious added mechanisms, as it's *less* flexible*;

I don't know what that is.
Is this libpcap.so is the ABI?

My major point is that proposing something, which can be "safe" because it
can be off by default, is not useful, given that most people get there by
distro package.

    >> 2) your proposal makes it somewhat easier to add mechanisms on
    >> "everything is a package" platforms and *significantly* easier to add
    >> mechanisms on "libpcap is part of the core OS" platforms, and makes it
    >> possible to allow D-Bus/{pick your DPDK-based mechanism}/etc. support
    >> in libpcap to be available if and only if the underlying mechanism is
    >> available, as it's *more* flexible.

Robin Jarry <rjarry () redhat com> wrote:
    > I am obviously biased, working for a company that sells support on such
    > a platform :-)

    > For what it's worth, most Linux distros operate in the same model:
    > Debian (and its derivatives), Arch, Alpine, Fedora, NixOS, OpenWRT,
    > etc. The only ones that don't are usually build-from-source
    > (e.g. Gentoo, Void).

_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s

Current thread: