установка tar.gz

[6tirlis]

Доброго времени суток. У меня как новичка возникла проблема по установке библиотек. Скачал Libpcap.1.6.2.tar.gz и патч к нему, но как установить не знаю. поиск по великому и могучему ничем не помог. Заранее прошу простить и понять за возможно глупый вопрос.

[alsoijw]

6tirlis, что в README говорится читал?

[6tirlis]

alsoijw,
да, читал, но мне бы по подробней инструкцию (для новичков).

[victor00000]

6tirlis,
ОТКРОЙ архив найти файл README и читай.

[6tirlis]

victor00000,

6tirlis,
ОТКРОЙ архив найти файл README и читай.

Собственно сам README

Код: [Выделить]

LIBPCAP 1.x.y

www.tcpdump.org

Please send inquiries/comments/reports to:
tcpdump-workers@lists.tcpdump.org

Anonymous Git is available via:
git clone git://bpf.tcpdump.org/libpcap

Please submit patches by forking the branch on GitHub at

http://github.com/the-tcpdump-group/libpcap/tree/master

and issuing a pull request.

formerly from Lawrence Berkeley National Laboratory
Network Research Group <libpcap@ee.lbl.gov>
ftp://ftp.ee.lbl.gov/old/libpcap-0.4a7.tar.Z

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed PostScript version can be
found at

ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, OpenBSD, DragonFly
BSD, and Mac OS X; an older, modified and undocumented version is
standard in AIX.  {DEC OSF/1, Digital UNIX, Tru64 UNIX} uses the
packetfilter interface but has been extended to accept BPF filters
(which libpcap utilizes).  Also, you can add BPF filter support to
Ultrix using the kernel source and/or object patches available in:

http://www.tcpdump.org/other/bpfext42.tar.Z

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Note to Linux distributions and *BSD systems that include libpcap:

There's now a rule to make a shared library, which should work on Linux
and *BSD, among other platforms.

It sets the soname of the library to "libpcap.so.1"; this is what it
should be, *NOT* libpcap.so.1.x or libpcap.so.1.x.y or something such as
that.

We've been maintaining binary compatibility between libpcap releases for
quite a while; there's no reason to tie a binary linked with libpcap to
a particular release of libpcap.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@lists.tcpdump.org".  Bugs, support
requests, and feature requests may also be submitted on the GitHub issue
tracker for libpcap at

https://github.com/the-tcpdump-group/libpcap/issues

Source code contributions, etc. should be sent to the email address
above or submitted by forking the branch on GitHub at

http://github.com/the-tcpdump-group/libpcap/tree/master

and issuing a pull request.

Current versions can be found at www.tcpdump.org.

 - The TCPdump team


[| toZen |]

6tirlis, покажите пожалуйста всё содержимое архива.

[6tirlis]

τοΖεη,

6tirlis, покажите пожалуйста всё содержимое архива.

содержимое архива

Код: [Выделить]

shtirlitz@6tirlitz-PC:~/Загрузки$ tar -tf libpcap-1.6.2.tar.gz
libpcap-1.6.2/
libpcap-1.6.2/grammar.y
libpcap-1.6.2/pcap_setnonblock.3pcap
libpcap-1.6.2/fad-glifc.c
libpcap-1.6.2/llc.h
libpcap-1.6.2/sunatmpos.h
libpcap-1.6.2/sf-pcap-ng.c
libpcap-1.6.2/pcap-dbus.c
libpcap-1.6.2/msdos/
libpcap-1.6.2/msdos/pktdrvr.h
libpcap-1.6.2/msdos/pkt_rx0.asm
libpcap-1.6.2/msdos/common.dj
libpcap-1.6.2/msdos/bin2c.c
libpcap-1.6.2/msdos/pktdrvr.c
libpcap-1.6.2/msdos/ndis2.c
libpcap-1.6.2/msdos/pkt_rx1.s
libpcap-1.6.2/msdos/ndis2.h
libpcap-1.6.2/msdos/makefile.wc
libpcap-1.6.2/msdos/makefile
libpcap-1.6.2/msdos/makefile.dj
libpcap-1.6.2/msdos/readme.dos
libpcap-1.6.2/msdos/ndis_0.asm
libpcap-1.6.2/Makefile-devel-adds
libpcap-1.6.2/pcap_list_tstamp_types.3pcap.in
libpcap-1.6.2/pcap_findalldevs.3pcap
libpcap-1.6.2/aclocal.m4
libpcap-1.6.2/SUNOS4/
libpcap-1.6.2/SUNOS4/nit_if.o.sun3
libpcap-1.6.2/SUNOS4/nit_if.o.sun4c.4.0.3c
libpcap-1.6.2/SUNOS4/nit_if.o.sparc
libpcap-1.6.2/README.sita
libpcap-1.6.2/pcap-bt-linux.h
libpcap-1.6.2/pcap_dump_ftell.3pcap
libpcap-1.6.2/lbl/
libpcap-1.6.2/lbl/os-aix4.h
libpcap-1.6.2/lbl/os-osf5.h
libpcap-1.6.2/lbl/os-hpux11.h
libpcap-1.6.2/lbl/os-solaris2.h
libpcap-1.6.2/lbl/os-sunos4.h
libpcap-1.6.2/lbl/os-osf4.h
libpcap-1.6.2/lbl/os-ultrix4.h
libpcap-1.6.2/pcap-nit.c
libpcap-1.6.2/pcap_can_set_rfmon.3pcap
libpcap-1.6.2/README.tru64
libpcap-1.6.2/CHANGES
libpcap-1.6.2/pcap-netfilter-linux.c
libpcap-1.6.2/savefile.c
libpcap-1.6.2/pcap-tstamp.manmisc.in
libpcap-1.6.2/README.hpux
libpcap-1.6.2/pcap-linux.c
libpcap-1.6.2/org.tcpdump.chmod_bpf.plist
libpcap-1.6.2/pcap-bpf.c
libpcap-1.6.2/pcap_open_offline.3pcap.in
libpcap-1.6.2/pcap_list_datalinks.3pcap.in
libpcap-1.6.2/pcap-can-linux.c
libpcap-1.6.2/pcap-snoop.c
libpcap-1.6.2/pcap_major_version.3pcap
libpcap-1.6.2/pcap-filter.manmisc.in
libpcap-1.6.2/pcap_datalink_name_to_val.3pcap
libpcap-1.6.2/pcap_activate.3pcap
libpcap-1.6.2/pcap_set_tstamp_type.3pcap.in
libpcap-1.6.2/pcap-dbus.h
libpcap-1.6.2/pcap_fileno.3pcap
libpcap-1.6.2/pcap-snf.h
libpcap-1.6.2/pcap_set_rfmon.3pcap
libpcap-1.6.2/pcap_set_immediate_mode.3pcap
libpcap-1.6.2/pcap-can-linux.h
libpcap-1.6.2/pcap_open_dead.3pcap.in
libpcap-1.6.2/pcap-config.in
libpcap-1.6.2/pcap-libdlpi.c
libpcap-1.6.2/pcap-win32.c
libpcap-1.6.2/pcap_set_buffer_size.3pcap
libpcap-1.6.2/pcap_dump_open.3pcap.in
libpcap-1.6.2/README
libpcap-1.6.2/pcap-septel.h
libpcap-1.6.2/pcap-bpf.h
libpcap-1.6.2/pcap_dump_close.3pcap
libpcap-1.6.2/pcap_lookupnet.3pcap
libpcap-1.6.2/pcap-sita.html
libpcap-1.6.2/sf-pcap-ng.h
libpcap-1.6.2/pcap_lookupdev.3pcap
libpcap-1.6.2/pcap-canusb-linux.h
libpcap-1.6.2/Makefile.in
libpcap-1.6.2/README.macosx
libpcap-1.6.2/fad-win32.c
libpcap-1.6.2/README.dag
libpcap-1.6.2/pcap_tstamp_type_val_to_name.3pcap
libpcap-1.6.2/runlex.sh
libpcap-1.6.2/pcap_dump_file.3pcap
libpcap-1.6.2/pcap_lib_version.3pcap
libpcap-1.6.2/pcap_tstamp_type_name_to_val.3pcap
libpcap-1.6.2/missing/
libpcap-1.6.2/missing/snprintf.c
libpcap-1.6.2/pcap_setdirection.3pcap
libpcap-1.6.2/pcap_inject.3pcap
libpcap-1.6.2/pcap-enet.c
libpcap-1.6.2/tests/
libpcap-1.6.2/tests/opentest.c
libpcap-1.6.2/tests/selpolltest.c
libpcap-1.6.2/tests/reactivatetest.c
libpcap-1.6.2/tests/findalldevstest.c
libpcap-1.6.2/tests/valgrindtest.c
libpcap-1.6.2/tests/filtertest.c
libpcap-1.6.2/tests/capturetest.c
libpcap-1.6.2/pcap-config.1
libpcap-1.6.2/nlpid.h
libpcap-1.6.2/pcap-bt-monitor-linux.h
libpcap-1.6.2/INSTALL.txt
libpcap-1.6.2/pcap-dag.h
libpcap-1.6.2/pcap_set_datalink.3pcap
libpcap-1.6.2/config.h.in
libpcap-1.6.2/pcap_stats.3pcap
libpcap-1.6.2/bpf_dump.c
libpcap-1.6.2/bpf/
libpcap-1.6.2/bpf/net/
libpcap-1.6.2/bpf/net/bpf_filter.c
libpcap-1.6.2/pcap.3pcap.in
libpcap-1.6.2/pcap_snapshot.3pcap
libpcap-1.6.2/pcap_geterr.3pcap
libpcap-1.6.2/pcap-savefile.manfile.in
libpcap-1.6.2/pcap_breakloop.3pcap
libpcap-1.6.2/scanner.l
libpcap-1.6.2/pcap.h
libpcap-1.6.2/pcap_strerror.3pcap
libpcap-1.6.2/pcap_datalink.3pcap.in
libpcap-1.6.2/pcap_set_timeout.3pcap
libpcap-1.6.2/README.linux
libpcap-1.6.2/pcap-namedb.h
libpcap-1.6.2/install-sh
libpcap-1.6.2/pcap-bt-monitor-linux.c
libpcap-1.6.2/TODO
libpcap-1.6.2/ChmodBPF/
libpcap-1.6.2/ChmodBPF/ChmodBPF
libpcap-1.6.2/ChmodBPF/StartupParameters.plist
libpcap-1.6.2/README.septel
libpcap-1.6.2/pcap-dos.c
libpcap-1.6.2/VERSION
libpcap-1.6.2/pcap-common.h
libpcap-1.6.2/pcap_compile.3pcap.in
libpcap-1.6.2/Win32/
libpcap-1.6.2/Win32/Prj/
libpcap-1.6.2/Win32/Prj/libpcap.dsw
libpcap-1.6.2/Win32/Prj/libpcap.dsp
libpcap-1.6.2/Win32/Src/
libpcap-1.6.2/Win32/Src/getservent.c
libpcap-1.6.2/Win32/Src/getaddrinfo.c
libpcap-1.6.2/Win32/Src/getopt.c
libpcap-1.6.2/Win32/Src/inet_net.c
libpcap-1.6.2/Win32/Src/inet_pton.c
libpcap-1.6.2/Win32/Src/getnetent.c
libpcap-1.6.2/Win32/Src/getnetbynm.c
libpcap-1.6.2/Win32/Src/gai_strerror.c
libpcap-1.6.2/Win32/Src/inet_aton.c
libpcap-1.6.2/Win32/Src/ffs.c
libpcap-1.6.2/Win32/Include/
libpcap-1.6.2/Win32/Include/ip6_misc.h
libpcap-1.6.2/Win32/Include/net/
libpcap-1.6.2/Win32/Include/net/paths.h
libpcap-1.6.2/Win32/Include/net/if.h
libpcap-1.6.2/Win32/Include/net/netdb.h
libpcap-1.6.2/Win32/Include/sockstorage.h
libpcap-1.6.2/Win32/Include/inetprivate.h
libpcap-1.6.2/Win32/Include/cdecl_ext.h
libpcap-1.6.2/Win32/Include/Gnuc.h
libpcap-1.6.2/Win32/Include/arpa/
libpcap-1.6.2/Win32/Include/arpa/nameser.h
libpcap-1.6.2/Win32/Include/addrinfo.h
libpcap-1.6.2/Win32/Include/bittypes.h
libpcap-1.6.2/pcap_is_swapped.3pcap
libpcap-1.6.2/pcap_loop.3pcap
libpcap-1.6.2/pcap-snf.c
libpcap-1.6.2/gencode.c
libpcap-1.6.2/inet.c
libpcap-1.6.2/dlpisubs.c
libpcap-1.6.2/pcap-null.c
libpcap-1.6.2/pcap_freecode.3pcap
libpcap-1.6.2/ieee80211.h
libpcap-1.6.2/pcap_setfilter.3pcap
libpcap-1.6.2/pcap-usb-linux.c
libpcap-1.6.2/config.guess
libpcap-1.6.2/LICENSE
libpcap-1.6.2/pcap-dag.c
libpcap-1.6.2/fad-null.c
libpcap-1.6.2/pcap_open_live.3pcap
libpcap-1.6.2/pcap-int.h
libpcap-1.6.2/pcap/
libpcap-1.6.2/pcap/namedb.h
libpcap-1.6.2/pcap/pcap.h
libpcap-1.6.2/pcap/vlan.h
libpcap-1.6.2/pcap/bluetooth.h
libpcap-1.6.2/pcap/usb.h
libpcap-1.6.2/pcap/nflog.h
libpcap-1.6.2/pcap/sll.h
libpcap-1.6.2/pcap/bpf.h
libpcap-1.6.2/pcap/ipnet.h
libpcap-1.6.2/fad-getad.c
libpcap-1.6.2/pcap-linktype.manmisc.in
libpcap-1.6.2/pcap_set_snaplen.3pcap
libpcap-1.6.2/fad-sita.c
libpcap-1.6.2/arcnet.h
libpcap-1.6.2/pcap-pf.c
libpcap-1.6.2/pcap_create.3pcap
libpcap-1.6.2/pcap_statustostr.3pcap
libpcap-1.6.2/mkdep
libpcap-1.6.2/bpf_image.c
libpcap-1.6.2/pcap-snit.c
libpcap-1.6.2/atmuni31.h
libpcap-1.6.2/pcap-canusb-linux.c
libpcap-1.6.2/pcap_get_selectable_fd.3pcap
libpcap-1.6.2/pcap-stdinc.h
libpcap-1.6.2/pcap-sita.h
libpcap-1.6.2/packaging/
libpcap-1.6.2/packaging/pcap.spec.in
libpcap-1.6.2/ppp.h
libpcap-1.6.2/pcap.c
libpcap-1.6.2/chmod_bpf
libpcap-1.6.2/CREDITS
libpcap-1.6.2/dlpisubs.h
libpcap-1.6.2/README.aix
libpcap-1.6.2/sf-pcap.h
libpcap-1.6.2/pcap_next_ex.3pcap
libpcap-1.6.2/configure.in
libpcap-1.6.2/sf-pcap.c
libpcap-1.6.2/optimize.c
libpcap-1.6.2/pcap_set_tstamp_precision.3pcap.in
libpcap-1.6.2/pcap-dos.h
libpcap-1.6.2/pcap_file.3pcap
libpcap-1.6.2/pcap_dump_flush.3pcap
libpcap-1.6.2/README.Win32
libpcap-1.6.2/etherent.c
libpcap-1.6.2/pcap-usb-linux.h
libpcap-1.6.2/pcap_set_promisc.3pcap
libpcap-1.6.2/pcap-septel.c
libpcap-1.6.2/pcap_dump.3pcap
libpcap-1.6.2/nametoaddr.c
libpcap-1.6.2/ethertype.h
libpcap-1.6.2/pcap-sita.c
libpcap-1.6.2/gencode.h
libpcap-1.6.2/config.sub
libpcap-1.6.2/pcap_datalink_val_to_name.3pcap
libpcap-1.6.2/fad-gifc.c
libpcap-1.6.2/pcap-dlpi.c
libpcap-1.6.2/configure
libpcap-1.6.2/pcap_close.3pcap
libpcap-1.6.2/pcap_get_tstamp_precision.3pcap.in
libpcap-1.6.2/pcap-bt-linux.c
libpcap-1.6.2/pcap-common.c
libpcap-1.6.2/pcap_offline_filter.3pcap
libpcap-1.6.2/pcap-netfilter-linux.h

[SergeyIT]

6tirlis, прочитай INSTALL.txt

[6tirlis]

SergeyIT,
прочитал с помощью переводчика. install.txt

Код: [Выделить]

To build libpcap, run "./configure" (a shell script). The configure
script will determine your system attributes and generate an
appropriate Makefile from Makefile.in. Next run "make". If everything
goes well you can su to root and run "make install". However, you need
not install libpcap if you just want to build tcpdump; just make sure
the tcpdump and libpcap directory trees have the same parent
directory.

If configure says:

    configure: warning: cannot determine packet capture interface
    configure: warning: (see INSTALL for more info)

then your system either does not support packet capture or your system
does support packet capture but libpcap does not support that
particular type. (If you have HP-UX, see below.) If your system uses a
packet capture not supported by libpcap, please send us patches; don't
forget to include an autoconf fragment suitable for use in
configure.in.

It is possible to override the default packet capture type, although
the circumstance where this works are limited. For example if you have
installed bpf under SunOS 4 and wish to build a snit libpcap:

    ./configure --with-pcap=snit

Another example is to force a supported packet capture type in the case
where the configure scripts fails to detect it.

You will need an ANSI C compiler to build libpcap. The configure script
will abort if your compiler is not ANSI compliant. If this happens, use
the generally available GNU C compiler (GCC).

If you use flex, you must use version 2.4.6 or higher. The configure
script automatically detects the version of flex and will not use it
unless it is new enough. You can use "flex -V" to see what version you
have (unless it's really old). The current version of flex is available
at flex.sourceforge.net and often comes packaged by means of the OS.
As of this writing, the current version is 2.5.37.

If you use bison, you must use flex (and visa versa). The configure
script automatically falls back to lex and yacc if both flex and bison
are not found.

Sometimes the stock C compiler does not interact well with flex and
bison. The list of problems includes undefined references for alloca.
You can get around this by installing gcc or manually disabling flex
and bison with:

    ./configure --without-flex --without-bison

If your system only has AT&T lex, this is okay unless your libpcap
program uses other lex/yacc generated code. (Although it's possible to
map the yy* identifiers with a script, we use flex and bison so we
don't feel this is necessary.)

Some systems support the Berkeley Packet Filter natively; for example
out of the box OSF and BSD/OS have bpf. If your system does not support
bpf, you will need to pick up:

ftp://ftp.ee.lbl.gov/bpf-*.tar.Z

Note well: you MUST have kernel source for your operating system in
order to install bpf. An exception is SunOS 4; the bpf distribution
includes replacement kernel objects for some of the standard SunOS 4
network device drivers. See the bpf INSTALL document for more
information.

If you use Solaris, there is a bug with bufmod(7) that is fixed in
Solaris 2.3.2 (aka SunOS 5.3.2). Setting a snapshot length with the
broken bufmod(7) results in data be truncated from the FRONT of the
packet instead of the end.  The work around is to not set a snapshot
length but this results in performance problems since the entire packet
is copied to user space. If you must run an older version of Solaris,
there is a patch available from Sun; ask for bugid 1149065. After
installing the patch, use "setenv BUFMOD_FIXED" to enable use of
bufmod(7). However, we recommend you run a more current release of
Solaris.

If you use the SPARCompiler, you must be careful to not use the
/usr/ucb/cc interface. If you do, you will get bogus warnings and
perhaps errors. Either make sure your path has /opt/SUNWspro/bin
before /usr/ucb or else:

    setenv CC /opt/SUNWspro/bin/cc

before running configure. (You might have to do a "make distclean"
if you already ran configure once).

Also note that "make depend" won't work; while all of the known
universe uses -M, the SPARCompiler uses -xM to generate makefile
dependencies.

If you are trying to do packet capture with a FORE ATM card, you may or
may not be able to. They usually only release their driver in object
code so unless their driver supports packet capture, there's not much
libpcap can do.

If you get an error like:

    tcpdump: recv_ack: bind error 0x???

when using DLPI, look for the DL_ERROR_ACK error return values, usually
in /usr/include/sys/dlpi.h, and find the corresponding value.

Under {DEC OSF/1, Digital UNIX, Tru64 UNIX}, packet capture must be
enabled before it can be used.  For instructions on how to enable packet
filter support, see:

ftp://ftp.digital.com/pub/Digital/dec-faq/Digital-UNIX

Look for the "How do I configure the Berkeley Packet Filter and capture
tcpdump traces?" item.

Once you enable packet filter support, your OSF system will support bpf
natively.

Under Ultrix, packet capture must be enabled before it can be used. For
instructions on how to enable packet filter support, see:

ftp://ftp.digital.com/pub/Digital/dec-faq/ultrix

If you use HP-UX, you must have at least version 9 and either the
version of cc that supports ANSI C (cc -Aa) or else use the GNU C
compiler. You must also buy the optional streams package. If you don't
have:

    /usr/include/sys/dlpi.h
    /usr/include/sys/dlpi_ext.h

then you don't have the streams package. In addition, we believe you
need to install the "9.X LAN and DLPI drivers cumulative" patch
(PHNE_6855) to make the version 9 DLPI work with libpcap.

The DLPI streams package is standard starting with HP-UX 10.

The HP implementation of DLPI is a little bit eccentric. Unlike
Solaris, you must attach /dev/dlpi instead of the specific /dev/*
network pseudo device entry in order to capture packets. The PPA is
based on the ifnet "index" number. Under HP-UX 9, it is necessary to
read /dev/kmem and the kernel symbol file (/hp-ux). Under HP-UX 10,
DLPI can provide information for determining the PPA. It does not seem
to be possible to trace the loopback interface. Unlike other DLPI
implementations, PHYS implies MULTI and SAP and you get an error if you
try to enable more than one promiscuous mode at a time.

It is impossible to capture outbound packets on HP-UX 9.  To do so on
HP-UX 10, you will, apparently, need a late "LAN products cumulative
patch" (at one point, it was claimed that this would be PHNE_18173 for
s700/10.20; at another point, it was claimed that the required patches
were PHNE_20892, PHNE_20725 and PHCO_10947, or newer patches), and to do
so on HP-UX 11 you will, apparently, need the latest lancommon/DLPI
patches and the latest driver patch for the interface(s) in use on HP-UX
11 (at one point, it was claimed that patches PHNE_19766, PHNE_19826,
PHNE_20008, and PHNE_20735 did the trick).

Furthermore, on HP-UX 10, you will need to turn on a kernel switch by
doing

echo 'lanc_outbound_promisc_flag/W 1' | adb -w /stand/vmunix /dev/mem

You would have to arrange that this happen on reboots; the right way to
do that would probably be to put it into an executable script file
"/sbin/init.d/outbound_promisc" and making
"/sbin/rc2.d/S350outbound_promisc" a symbolic link to that script.

Finally, testing shows that there can't be more than one simultaneous
DLPI user per network interface.

If you use Linux, this version of libpcap is known to compile and run
under Red Hat 4.0 with the 2.0.25 kernel.  It may work with earlier 2.X
versions but is guaranteed not to work with 1.X kernels.  Running more
than one libpcap program at a time, on a system with a 2.0.X kernel, can
cause problems since promiscuous mode is implemented by twiddling the
interface flags from the libpcap application; the packet capture
mechanism in the 2.2 and later kernels doesn't have this problem.  Also,
packet timestamps aren't very good.  This appears to be due to haphazard
handling of the timestamp in the kernel.

Note well: there is rumoured to be a version of tcpdump floating around
called 3.0.3 that includes libpcap and is supposed to support Linux.
You should be advised that neither the Network Research Group at LBNL
nor the Tcpdump Group ever generated a release with this version number.
The LBNL Network Research Group notes with interest that a standard
cracker trick to get people to install trojans is to distribute bogus
packages that have a version number higher than the current release.
They also noted with annoyance that 90% of the Linux related bug reports
they got are due to changes made to unofficial versions of their page.
If you are having trouble but aren't using a version that came from
tcpdump.org, please try that before submitting a bug report!

On Linux, libpcap will not work if the kernel does not have the packet
socket option enabled; see the README.linux file for information about
this.

If you use AIX, you may not be able to build libpcap from this release.
We do not have an AIX system in house so it's impossible for us to test
AIX patches submitted to us.  We are told that you must link against
/lib/pse.exp, that you must use AIX cc or a GNU C compiler newer than
2.7.2, and that you may need to run strload before running a libpcap
application.

Read the README.aix file for information on installing libpcap and
configuring your system to be able to support libpcap.

If you use NeXTSTEP, you will not be able to build libpcap from this
release.

If you use SINIX, you should be able to build libpcap from this
release. It is known to compile and run on SINIX-Y/N 5.42 with the C-DS
V1.0 or V1.1 compiler. But note that in some releases of SINIX, yacc
emits incorrect code; if grammar.y fails to compile, change every
occurence of:

#ifdef YYDEBUG

to:
#if YYDEBUG

Another workaround is to use flex and bison.

If you use SCO, you might have trouble building libpcap from this
release. We do not have a machine running SCO and have not had reports
of anyone successfully building on it; the current release of libpcap
does not compile on SCO OpenServer 5.  Although SCO apparently supports
DLPI to some extent, the DLPI in OpenServer 5 is very non-standard, and
it appears that completely new code would need to be written to capture
network traffic.  SCO do not appear to provide tcpdump binaries for
OpenServer 5 or OpenServer 6 as part of SCO Skunkware:

http://www.sco.com/skunkware/

If you use UnixWare, you might be able to build libpcap from this
release, or you might not.  We do not have a machine running UnixWare,
so we have not tested it; however, SCO provide packages for libpcap
0.6.2 and tcpdump 3.7.1 in the UnixWare 7/Open UNIX 8 part of SCO
Skunkware, and the source package for libpcap 0.6.2 is not changed from
the libpcap 0.6.2 source release, so this release of libpcap might also
build without changes on UnixWare 7.

If linking tcpdump fails with "Undefined: _alloca" when using bison on
a Sun4, your version of bison is broken. In any case version 1.16 or
higher is recommended (1.14 is known to cause problems 1.16 is known to
work). Either pick up a current version from:

ftp://ftp.gnu.org/pub/gnu/bison

or hack around it by inserting the lines:

#ifdef __GNUC__
#define alloca __builtin_alloca
#else
#ifdef sparc
#include <alloca.h>
#else
char *alloca ();
#endif
#endif

right after the (100 line!) GNU license comment in bison.simple, remove
grammar.[co] and fire up make again.

If you use SunOS 4, your kernel must support streams NIT. If you run a
libpcap program and it dies with:

    /dev/nit: No such device

You must add streams NIT support to your kernel configuration, run
config and boot the new kernel.

If you are running a version of SunOS earlier than 4.1, you will need
to replace the Sun supplied /sys/sun{3,4,4c}/OBJ/nit_if.o with the
appropriate version from this distribution's SUNOS4 subdirectory and
build a new kernel:

nit_if.o.sun3-sunos4 (any flavor of sun3)
nit_if.o.sun4c-sunos4.0.3c (SS1, SS1+, IPC, SLC, etc.)
nit_if.o.sun4-sunos4 (Sun4's not covered by
    nit_if.o.sun4c-sunos4.0.3c)

These nit replacements fix a bug that makes nit essentially unusable in
pre-SunOS 4.1.  In addition, our sun4c-sunos4.0.3c nit gives you
timestamps to the resolution of the SS-1 clock (1 us) rather than the
lousy 20ms timestamps Sun gives you  (tcpdump will print out the full
timestamp resolution if it finds it's running on a SS-1).

FILES
-----
CHANGES - description of differences between releases
ChmodBPF/* - Mac OS X startup item to set ownership and permissions
  on /dev/bpf*
CREDITS - people that have helped libpcap along
INSTALL.txt - this file
LICENSE - the license under which tcpdump is distributed
Makefile.in - compilation rules (input to the configure script)
README - description of distribution
README.aix - notes on using libpcap on AIX
README.dag - notes on using libpcap to capture on Endace DAG devices
README.hpux - notes on using libpcap on HP-UX
README.linux - notes on using libpcap on Linux
README.macosx - notes on using libpcap on Mac OS X
README.septel   - notes on using libpcap to capture on Intel/Septel devices
README.sita - notes on using libpcap to capture on SITA devices
README.tru64 - notes on using libpcap on Digital/Tru64 UNIX
README.Win32 - notes on using libpcap on Win32 systems (with WinPcap)
SUNOS4 - pre-SunOS 4.1 replacement kernel nit modules
VERSION - version of this release
acconfig.h - support for post-2.13 autoconf
aclocal.m4 - autoconf macros
arcnet.h - ARCNET definitions
atmuni31.h - ATM Q.2931 definitions
bpf/net - copy of bpf_filter.c
bpf_dump.c - BPF program printing routines
bpf_filter.c - symlink to bpf/net/bpf_filter.c
bpf_image.c - BPF disassembly routine
config.guess - autoconf support
config.h.in - autoconf input
config.sub - autoconf support
configure - configure script (run this first)
configure.in - configure script source
dlpisubs.c - DLPI-related functions for pcap-dlpi.c and pcap-libdlpi.c
dlpisubs.h - DLPI-related function declarations
etherent.c - /etc/ethers support routines
ethertype.h - Ethernet protocol types and names definitions
fad-getad.c - pcap_findalldevs() for systems with getifaddrs()
fad-gifc.c - pcap_findalldevs() for systems with only SIOCGIFLIST
fad-glifc.c - pcap_findalldevs() for systems with SIOCGLIFCONF
fad-null.c - pcap_findalldevs() for systems without capture support
fad-sita.c - pcap_findalldevs() for systems with SITA support
fad-win32.c - pcap_findalldevs() for WinPcap
filtertest.c - test program for BPF compiler
findalldevstest.c - test program for pcap_findalldevs()
gencode.c - BPF code generation routines
gencode.h - BPF code generation definitions
grammar.y - filter string grammar
ieee80211.h - 802.11 definitions
inet.c - network routines
install-sh - BSD style install script
lbl/os-*.h - OS-dependent defines and prototypes
llc.h - 802.2 LLC SAP definitions
missing/* - replacements for missing library functions
mkdep - construct Makefile dependency list
msdos/* - drivers for MS-DOS capture support
nametoaddr.c - hostname to address routines
nlpid.h - OSI network layer protocol identifier definitions
net - symlink to bpf/net
optimize.c - BPF optimization routines
packaging - packaging information for building libpcap RPMs
pcap/bluetooth.h - public definition of DLT_BLUETOOTH_HCI_H4_WITH_PHDR header
pcap/bpf.h - BPF definitions
pcap/namedb.h - public libpcap name database definitions
pcap/pcap.h - public libpcap definitions
pcap/sll.h - public definition of DLT_LINUX_SLL header
pcap/usb.h - public definition of DLT_USB header
pcap-bpf.c - BSD Packet Filter support
pcap-bpf.h - header for backwards compatibility
pcap-bt-linux.c - Bluetooth capture support for Linux
pcap-bt-linux.h - Bluetooth capture support for Linux
pcap-dag.c - Endace DAG device capture support
pcap-dag.h - Endace DAG device capture support
pcap-dlpi.c - Data Link Provider Interface support
pcap-dos.c - MS-DOS capture support
pcap-dos.h - headers for MS-DOS capture support
pcap-enet.c - enet support
pcap-int.h - internal libpcap definitions
pcap-libdlpi.c - Data Link Provider Interface support for systems with libdlpi
pcap-linux.c - Linux packet socket support
pcap-namedb.h - header for backwards compatibility
pcap-nit.c - SunOS Network Interface Tap support
pcap-nit.h - SunOS Network Interface Tap definitions
pcap-null.c - dummy monitor support (allows offline use of libpcap)
pcap-pf.c - Ultrix and Digital/Tru64 UNIX Packet Filter support
pcap-pf.h - Ultrix and Digital/Tru64 UNIX Packet Filter definitions
pcap-septel.c   - Intel/Septel device capture support
pcap-septel.h   - Intel/Septel device capture support
pcap-sita.c - SITA device capture support
pcap-sita.h - SITA device capture support
pcap-sita.html - SITA device capture documentation
pcap-stdinc.h - includes and #defines for compiling on Win32 systems
pcap-snit.c - SunOS 4.x STREAMS-based Network Interface Tap support
pcap-snoop.c - IRIX Snoop network monitoring support
pcap-usb-linux.c - USB capture support for Linux
pcap-usb-linux.h - USB capture support for Linux
pcap-win32.c - WinPcap capture support
pcap.3pcap - manual entry for the library
pcap.c - pcap utility routines
pcap.h - header for backwards compatibility
pcap_*.3pcap - manual entries for library functions
pcap-filter.4 - manual entry for filter syntax
pcap-linktype.4 - manual entry for link-layer header types
ppp.h - Point to Point Protocol definitions
runlex.sh - wrapper for Lex/Flex
savefile.c - offline support
scanner.l - filter string scanner
sunatmpos.h - definitions for SunATM capturing
Win32 - headers and routines for building on Win32 systems
ссылка на сам файл http://www.tcpdump.org/release/libpcap-1.6.2.tar.gz
и патч к нему http://www.linuxfromscratch.org/patches/blfs/7.7/libpcap-1.6.2-enable_bluetooth-1.patch

[| toZen |]

6tirlis, что-то непонятно?
Качаете архив в хомяк, открываете, переходите в распакованную директорию и дальше по сценарию - ./configure >>> make >>> sudo make install.

[SergeyIT]

Перед make можно патч применить

[6tirlis]

6tirlis, что-то непонятно?
Качаете архив в хомяк, открываете, переходите в распакованную директорию и дальше по сценарию - ./configure >>> make >>> sudo make install.

Перед make можно патч применить

τοΖεη,
можно по подробней описать порядок действий?

[SergeyIT]

На форуме не раз обсуждалось (справа вверху на странице - окно поиск есть)

https://help.ubuntu.ru/wiki/%D1%83%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0_%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC
Читайте - установка из исходников.

Про пачти
https://forum.ubuntu.ru/index.php?topic=231302.0

Можете еще поискать.

[Heider]

Вот =checkinstall]здесь подробнее.

[6tirlis]

Heider,
Спасибо