Re: [PATCH v5 0/4] wireshark extcap support

[Stephen Hemminger <stephen@networkplumber.org>]

On Fri, 16 Oct 2026 15:30:30 -0700
Stephen Hemminger <stephen@networkplumber.org> wrote:

> This series adds live packet capture from a running DPDK application
> over the telemetry socket which is usable as a source of Wireshark
> external capture (https://www.wireshark.org/docs/man-pages/extcap.html)
> 
> Capture is avaliable by default but can be disabled on the command
> line with --no-capture. It works on Linux and FreeBSD.
> 
> How it works:
>  - The capture library registers telemetry commands (/ethdev/capture/*)
>  - Callbacks are installed on the specified port/queues to copy packets
>  - Packets are formatted as pcapng and written to the specified output
>  - No packet data passes through the telemetry socket itself


I am going to suggest deferring this to 27.03.
Not happy with the security model, and using telemetry as the control
channel. It needs to have its own control channel, and the destination
file needs to come from the helper not get opened by DPDK process (primary).