Original thread on the users list (with all the dumpcap related details):
https://mails.dpdk.org/archives/users/2024-June/007702.html

Example filter causing the problem:
"host 1::1 or host 1::1 or host 1::1 or host 1::1 or host 1::1 or host 1::1"

The simplest way to reproduce is by using the test-suite, by adding the filter
above to the 'sample_filters' in 'test_bpf.c' and invoke the test:

time sudo build/app/dpdk-test bpf_convert_autotest

This causes the test to take ~25 seconds instead of 2 seconds (btw, adding
--log-level=lib.bpf:debug gives tons of output).