Wireshark-dev: Re: [Wireshark-dev] Why the name "Wiretap"?
From: Jakub Zawadzki <darkjames-ws@xxxxxxxxxxxx>
Date: Fri, 28 Sep 2012 22:48:28 +0200
On Fri, Sep 28, 2012 at 01:23:16PM -0700, Gilbert Ramirez wrote:
> Libpcap (...) has a wonderful BPF optimizing engine.

With lot of bugs...

http://sourceforge.net/tracker/?func=detail&aid=3054909&group_id=53067&atid=469577
http://seclists.org/tcpdump/2011/q4/83
http://permalink.gmane.org/gmane.network.tcpdump.devel/2265 (this one might have been fixed?)