Date: Tue, 7 Jan 2003 12:39:16 -0300 (ART) From: Fernando Gleiser <fgleiser@cactus.fi.uba.ar> To: Brendan Kosowski <brendan@bmk.com.au> Cc: FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: tcpdump problem Message-ID: <20030107123323.H58000-100000@cactus.fi.uba.ar> In-Reply-To: <Pine.BSF.3.96.1030108013855.36330A-100000@garfield.bmk.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 8 Jan 2003, Brendan Kosowski wrote: > > I am running FreeBSD 3.4 with the GENERIC kernel which has > the line "pseudo-device bpfilter 1" uncommented in the config. I also > re-built and re-installed GENERIC just to be sure. > > /dev/bpf0 has "rw" permissions for the owner (root). There are no other > bpf devices in /dev. > > When I su to root and run tcpdump, I get the message > "tcpdump: /dev/bpf1: No such file or directory". Someone else is using bpf0 (dhcp perhaps?), so tcpdump tries to open bpf1. You only have one bpf in the kernel, so you're out of luck and you'll have to recompile the kernel. Change "pseudo-device bpfilter 1" to "pseudo-device bpfilter 4", rebuild and reinstall the kernel. Then (or while you're rebuilding the kernel), go to /dev/ and do './MAKEDEV bpf1' (and 2 and 3). After the reboot, it should work fine. Fer PS: why are you using such an old version? unless you have a very good reason, you should upgrade > > Can anyone help? > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030107123323.H58000-100000>