[packages/ptcpdump] Initial

[arekm]

commit 1c35cc7eaacf0fab51edae1f0a1659669a19514b
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Fri Aug 29 18:41:33 2025 +0200

    Initial

 ptcpdump.spec | 49 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
---
diff --git a/ptcpdump.spec b/ptcpdump.spec
new file mode 100644
index 0000000..8f324d8
--- /dev/null
+++ b/ptcpdump.spec
@@ -0,0 +1,49 @@
+Summary:	Process-aware, eBPF-based tcpdump
+Name:		ptcpdump
+Version:	0.35.0
+Release:	1
+License:	MIT
+Group:		Networking/Utilities
+Source0:	https://github.com/mozillazg/ptcpdump/archive/refs/tags/v%{version}.tar.gz
+# Source0-md5:	b13f760fe4717d7eb8f2d31c4a116875
+URL:		https://github.com/mozillazg/ptcpdump
+BuildRequires:	autoconf
+BuildRequires:	clang >= 14
+BuildRequires:	elfutils-devel
+BuildRequires:	golang >= 1.23
+BuildRequires:	libpcap-devel
+BuildRoot:	%{tmpdir}/%{name}-%{version}-root-%(id -u -n)
+
+%description
+Process-aware, eBPF-based tcpdump.
+
+- Filter by: --pid (process), --pname (process name), --container-id
+  (container), --pod-name (pod)
+- tcpdump-compatible flags (-i, -w, -c, -s, -n, -C, -W, -A, and more)
+- Supports pcap-filter(7) syntax like tcpdump
+- tcpdump-like output + process/container/pod context
+- Verbose mode shows detailed metadata for processes and
+  containers/pods
+- PcapNG with embedded metadata (Wireshark-ready)
+- Cross-namespace capture (--netns)
+- Kernel-space BPF filtering (low overhead, reduces CPU usage)
+
+%prep
+%setup -q
+
+%build
+%{__make} build-bpf
+%{__make} build-dynamic-link
+%install
+rm -rf $RPM_BUILD_ROOT
+install -d $RPM_BUILD_ROOT%{_bindir}
+
+cp -p %{name} $RPM_BUILD_ROOT%{_bindir}/%{name}
+
+%clean
+rm -rf $RPM_BUILD_ROOT
+
+%files
+%defattr(644,root,root,755)
+%doc README.md
+%attr(755,root,root) %{_bindir}/%{name}
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/ptcpdump.git/commitdiff/1c35cc7eaacf0fab51edae1f0a1659669a19514b