# 使用 Homebrew, apk, dnf, MacPorts, Nix, pacman, apt, zypper 安装 libpcap

查看 libpcap 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:libpcap
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install libpcap
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install libpcap
```

  证据: MacPorts ports tree: net/libpcap/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add libpcap
```

  证据: Alpine Linux edge package indexes: libpcap from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install libpcap
```

  证据: Fedora Rawhide package metadata: libpcap from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#libpcap
```

  证据: nixpkgs package indexes: pkgs/by-name/li/libpcap/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S libpcap
```

  证据: Arch Linux sync databases: libpcap from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz

- Debian apt (92%):

```sh
sudo apt install libpcap-dev
```

  证据: Debian stable package indexes: libpcap-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- zypper (92%):

```sh
sudo zypper install libpcap-devel
```

  证据: openSUSE Tumbleweed package metadata: libpcap-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## 软件包事实

- **软件包键:** brew:libpcap
- **软件包管理器:** Homebrew
- **版本:** 1.10.6
- **来源摘要:** Portable library for network traffic capture
- **主页:** <https://www.tcpdump.org/>
- **仓库:** <https://github.com/the-tcpdump-group/libpcap>
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- pcap-config (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 1.10.6
## 项目历史与用法

libpcap is the portable packet-capture library maintained with tcpdump by The Tcpdump Group. It gives programs a common C API for capturing packets and compiling packet filters across Unix-like operating systems whose native capture interfaces differ.

### 项目历史

The project grew out of the tcpdump and Berkeley Packet Filter lineage. Steve McCanne's SharkFest 2011 talk traces the packet-capture work back to a 1988 Berkeley/Lawrence Berkeley Laboratory setting, while the 1993 BPF paper documents the kernel/user-level filtering architecture that made efficient capture practical.

The Tcpdump Group later maintained libpcap as a separate library paired with tcpdump. The repository and CHANGES file show long-running attention to operating-system capture backends, filter syntax, savefile reading, remote capture support, and ABI concerns.

### 采用历史

libpcap became infrastructure rather than an end-user application: tcpdump, analyzers, monitors, and security tools can link against one API while relying on each operating system's capture mechanism underneath. The upstream README explicitly addresses Linux distributions and BSD systems that ship libpcap and warns packagers not to encode release-specific sonames.

Its adoption is also tied to the pcap file and filter culture around tcpdump: packet captures, reproducible troubleshooting, and command-line network forensics all use libpcap conventions even when users interact through higher-level tools.

### 使用方式

Developers use libpcap to enumerate capture devices, open live or saved captures, compile packet filters, and read packet records. Package-manager users usually install it as a dependency of network tools or as development headers for software that needs packet capture.

The small `pcap-config` utility is package-nerd visible because build systems and ports use it to discover compiler and linker flags for libpcap.

### 为什么软件包爱好者会关心

libpcap matters because it is a thin but durable portability layer over messy kernel capture APIs. It is the package that turns packet capture from an operating-system-specific problem into a linkable library dependency.

It is also a classic packaging stress test: headers, shared-library ABI, privileged capture behavior, optional capture backends, and security-sensitive parsers all meet in one small C library.

### 时间线

- 1988: tcpdump and BPF lineage begins in the Berkeley/Lawrence Berkeley Laboratory packet-capture work described by Steve McCanne.
- 1993: The BSD Packet Filter paper documents the efficient packet filtering architecture behind the tcpdump/libpcap family.
- 2003-11-12: The libpcap CHANGES file records the 0.8 release summary.
- 2008-10-27: The libpcap CHANGES file records the 1.0.0 release summary.
- 2023-04-07: The libpcap CHANGES file records the 1.10.4 release summary.

### Related projects

- tcpdump is libpcap's sibling command-line analyzer and the most direct companion project.
- BPF is the filtering architecture behind libpcap filter compilation and efficient packet selection.
- WinPcap and Npcap are Windows-oriented relatives in the pcap ecosystem, while Wireshark is a major downstream packet-analysis application in the same capture-file culture.

### 来源

- <https://github.com/the-tcpdump-group/libpcap>
- <https://raw.githubusercontent.com/the-tcpdump-group/libpcap/master/CHANGES>
- <https://sharkfest.wireshark.org/retrospective/sfus/presentations11/McCanne-Sharkfest%2711_Keynote_Address.pdf>
- <https://www.tcpdump.org/>
- <https://www.usenix.org/legacy/publications/library/proceedings/sd93/mccanne.pdf>


## 安全说明

library-like package without higher-risk signals.

- **Geiger 风险:** 绿色 / 低
- library-like package without higher-risk signals

## 其他软件包管理器记录

- Debian apt - libpcap-dev - 1.10.5-2: normalized package name match | Debian stable package indexes: libpcap-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | development library for libpcap (transitional package) | https://www.tcpdump.org/
- Debian apt - libpcap0.8-dev - 1.10.5-2: normalized package name match | Debian stable package indexes: libpcap0.8-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | development library and header files for libpcap0.8t64 | https://www.tcpdump.org/
- Debian apt - libpcap0.8t64 - 1.10.5-2: normalized package name match | Debian stable package indexes: libpcap0.8t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | system interface for user-level packet capture | https://www.tcpdump.org/
- Nix - libpcap: normalized package name match | nixpkgs package indexes: pkgs/by-name/li/libpcap/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - libpcap-dev - 1.10.4-4.1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: libpcap-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | development library for libpcap (transitional package) | https://www.tcpdump.org/
- Ubuntu apt - libpcap0.8-dev - 1.10.4-4.1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: libpcap0.8-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | development library and header files for libpcap0.8t64 | https://www.tcpdump.org/
- Ubuntu apt - libpcap0.8t64 - 1.10.4-4.1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: libpcap0.8t64 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | system interface for user-level packet capture | https://www.tcpdump.org/
- apk - libpcap - 1.10.6-r1: normalized package name match | Alpine Linux edge package indexes: libpcap from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Portable library for network traffic capture | https://www.tcpdump.org/
- apk - libpcap-dev - 1.10.6-r1: normalized package name match | Alpine Linux edge package indexes: libpcap-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Portable library for network traffic capture (development files) | https://www.tcpdump.org/
- apk - libpcap-doc - 1.10.6-r1: normalized package name match | Alpine Linux edge package indexes: libpcap-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Portable library for network traffic capture (documentation) | https://www.tcpdump.org/
- dnf - libpcap - 1.10.6-3.fc45: normalized package name match | Fedora Rawhide package metadata: libpcap from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A system-independent interface for user-level packet capture | https://www.tcpdump.org/
- dnf - libpcap-devel - 1.10.6-3.fc45: normalized package name match | Fedora Rawhide package metadata: libpcap-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Libraries and header files for the libpcap library | https://www.tcpdump.org/
- pacman - libpcap - 1.10.6-1: normalized package name match | Arch Linux sync databases: libpcap from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz | A system-independent interface for user-level packet capture | https://www.tcpdump.org/
- zypper - libpcap-devel - 1.10.6-1.6: normalized package name match | openSUSE Tumbleweed package metadata: libpcap-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | A Library for Network Sniffers | https://www.tcpdump.org/
- zypper - libpcap-devel-32bit - 1.10.6-1.6: normalized package name match | openSUSE Tumbleweed package metadata: libpcap-devel-32bit from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | A Library for Network Sniffers | https://www.tcpdump.org/
- zypper - libpcap-devel-static - 1.10.6-1.6: normalized package name match | openSUSE Tumbleweed package metadata: libpcap-devel-static from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | A Library for Network Sniffers | https://www.tcpdump.org/


## Combined YAML source

View the package source record on GitHub. [combined/libpcap.yml](https://github.com/mxcl/pkgdb/blob/main/combined/libpcap.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph