From owner-freebsd-questions  Tue Jan  7  7:38:45 2003
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3959E37B401
	for <freebsd-questions@freebsd.org>; Tue,  7 Jan 2003 07:38:44 -0800 (PST)
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by mx1.FreeBSD.org (Postfix) with ESMTP id F3D4643EA9
	for <freebsd-questions@freebsd.org>; Tue,  7 Jan 2003 07:38:42 -0800 (PST)
	(envelope-from fgleiser@cactus.fi.uba.ar)
Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108])
	by cactus.fi.uba.ar (8.12.3/8.12.3) with ESMTP id h07FdGvP058045;
	Tue, 7 Jan 2003 12:39:16 -0300 (ART)
	(envelope-from fgleiser@cactus.fi.uba.ar)
Date: Tue, 7 Jan 2003 12:39:16 -0300 (ART)
From: Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
To: Brendan Kosowski <brendan@bmk.com.au>
Cc: FreeBSD Questions <freebsd-questions@freebsd.org>
Subject: Re: tcpdump problem
In-Reply-To: <Pine.BSF.3.96.1030108013855.36330A-100000@garfield.bmk.com.au>
Message-ID: <20030107123323.H58000-100000@cactus.fi.uba.ar>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Spam-Status: No, hits=-103.4 required=5.0
	tests=IN_REP_TO,USER_IN_WHITELIST
	version=2.31
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Wed, 8 Jan 2003, Brendan Kosowski wrote:

>
> I am running FreeBSD 3.4 with the GENERIC kernel which has
> the line "pseudo-device bpfilter 1" uncommented in the config. I also
> re-built and re-installed GENERIC just to be sure.
>
> /dev/bpf0 has "rw" permissions for the owner (root). There are no other
> bpf devices in /dev.
>
> When I su to root and run tcpdump, I get the message
> "tcpdump: /dev/bpf1: No such file or directory".

Someone else is using bpf0 (dhcp perhaps?), so tcpdump tries to open
bpf1. You only have one bpf in the kernel, so you're out of luck and you'll
have to recompile the kernel.

Change "pseudo-device bpfilter 1" to "pseudo-device bpfilter 4", rebuild
and reinstall the kernel. Then (or while you're rebuilding the kernel),
go to /dev/ and do './MAKEDEV bpf1' (and 2 and 3). After the reboot, it
should work fine.


			Fer

PS: why are you using such an old version? unless you have a very good
reason, you should upgrade

>
> Can anyone help?
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message