brew / 排名 961

使用 Homebrew, apk, dnf, MacPorts, Nix, pacman, apt, zypper 安装 libpcap

查看 libpcap 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

其他安装命令

macOS

Homebrew已验证 · 100%

brew install libpcap

local Homebrew formula metadata

MacPorts已验证 · 94%

sudo port install libpcap

MacPorts ports tree · net/libpcap/Portfile · 来源: api.github.com

Linux

Alpine Linux apk已验证 · 92%

sudo apk add libpcap

Alpine Linux edge package indexes · libpcap · 来源: dl-cdn.alpinelinux.org

Fedora dnf已验证 · 92%

sudo dnf install libpcap

Fedora Rawhide package metadata · libpcap · 来源: dl.fedoraproject.org

Nix已验证 · 92%

nix profile install nixpkgs#libpcap

nixpkgs package indexes · pkgs/by-name/li/libpcap/package.nix · 来源: api.github.com

Arch Linux pacman已验证 · 92%

sudo pacman -S libpcap

Arch Linux sync databases · libpcap · 来源: geo.mirror.pkgbuild.com

Debian apt已验证 · 92%

sudo apt install libpcap-dev

Debian stable package indexes · libpcap-dev · 来源: deb.debian.org

openSUSE zypper已验证 · 92%

sudo zypper install libpcap-devel

openSUSE Tumbleweed package metadata · libpcap-devel · 来源: download.opensuse.org

概览

软件包摘要

Portable library for network traffic capture

项目链接

命令和别名

pcap-config

历史

项目历史与用法

libpcap is the portable packet-capture library maintained with tcpdump by The Tcpdump Group. It gives programs a common C API for capturing packets and compiling packet filters across Unix-like operating systems whose native capture interfaces differ.

项目历史

The project grew out of the tcpdump and Berkeley Packet Filter lineage. Steve McCanne's SharkFest 2011 talk traces the packet-capture work back to a 1988 Berkeley/Lawrence Berkeley Laboratory setting, while the 1993 BPF paper documents the kernel/user-level filtering architecture that made efficient capture practical.

The Tcpdump Group later maintained libpcap as a separate library paired with tcpdump. The repository and CHANGES file show long-running attention to operating-system capture backends, filter syntax, savefile reading, remote capture support, and ABI concerns.

采用历史

libpcap became infrastructure rather than an end-user application: tcpdump, analyzers, monitors, and security tools can link against one API while relying on each operating system's capture mechanism underneath. The upstream README explicitly addresses Linux distributions and BSD systems that ship libpcap and warns packagers not to encode release-specific sonames.

Its adoption is also tied to the pcap file and filter culture around tcpdump: packet captures, reproducible troubleshooting, and command-line network forensics all use libpcap conventions even when users interact through higher-level tools.

使用方式

Developers use libpcap to enumerate capture devices, open live or saved captures, compile packet filters, and read packet records. Package-manager users usually install it as a dependency of network tools or as development headers for software that needs packet capture.

The small `pcap-config` utility is package-nerd visible because build systems and ports use it to discover compiler and linker flags for libpcap.

为什么软件包爱好者会关心

libpcap matters because it is a thin but durable portability layer over messy kernel capture APIs. It is the package that turns packet capture from an operating-system-specific problem into a linkable library dependency.

It is also a classic packaging stress test: headers, shared-library ABI, privileged capture behavior, optional capture backends, and security-sensitive parsers all meet in one small C library.

时间线

1988: tcpdump and BPF lineage begins in the Berkeley/Lawrence Berkeley Laboratory packet-capture work described by Steve McCanne.
1993: The BSD Packet Filter paper documents the efficient packet filtering architecture behind the tcpdump/libpcap family.
2003-11-12: The libpcap CHANGES file records the 0.8 release summary.
2008-10-27: The libpcap CHANGES file records the 1.0.0 release summary.
2023-04-07: The libpcap CHANGES file records the 1.10.4 release summary.

Related projects

tcpdump is libpcap's sibling command-line analyzer and the most direct companion project.
BPF is the filtering architecture behind libpcap filter compilation and efficient packet selection.
WinPcap and Npcap are Windows-oriented relatives in the pcap ecosystem, while Wireshark is a major downstream packet-analysis application in the same capture-file culture.

来源

安全态势

风险级别：绿色

library-like package without higher-risk signals.

风险分类器

绿色风险 · 低置信度 · appliance

原因

library-like package without higher-risk signals

信号

metadata:library-like

安装行为

未记录 Homebrew bottle 元数据。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令	类型	暴露范围	备注
`pcap-config`	可执行文件	已索引可执行文件	从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-08-03

管理器版本1.10.6

管理器更新时间

本地数据未知

上游不可用

检测到的最新版本未检测到

OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键	brew:libpcap
版本	1.10.6
软件包管理器	Homebrew
主页	https://www.tcpdump.org/
仓库	https://github.com/the-tcpdump-group/libpcap
Bottle	未记录
服务	未声明

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

libpcap-dev 1.10.5-2

development library for libpcap (transitional package)