diff --git a/projects/tcpdump.org/package.yml b/projects/tcpdump.org/package.yml
new file mode 100644
index 00000000..863cb586
--- /dev/null
+++ b/projects/tcpdump.org/package.yml
@@ -0,0 +1,28 @@
+distributable:
+  url: https://www.tcpdump.org/release/libpcap-{{version}}.tar.gz
+  strip-components: 1
+versions:
+  url: https://www.tcpdump.org/release/
+  match: /libpcap-\d+\.\d+\.\d+\.tar\.gz/
+  strip:
+    - /^libpcap-/
+    - /\.tar\.gz/
+build:
+  dependencies:
+    tea.xyz/gx/cc: c99
+    gnu.org/make: '*'
+    gnu.org/bison: '*'
+    github.com/westes/flex: '*'
+  script:
+    - ./configure $ARGS
+    - make --jobs {{ hw.concurrency }} install
+  env:
+    ARGS:
+      - --prefix="{{prefix}}"
+      - --enable-ipv6
+      - --disable-universal
+provides:
+  - bin/pcap-config
+test:
+  script:
+    - pcap-config --version | grep {{version}}
\ No newline at end of file