Date: Wed, 8 Jan 2003 14:34:53 +1100 (EST) From: Brendan Kosowski <brendan@bmk.com.au> To: Fernando Gleiser <fgleiser@cactus.fi.uba.ar> Cc: FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: tcpdump problem Message-ID: <Pine.BSF.3.96.1030108135956.347A-100000@garfield.bmk.com.au> In-Reply-To: <20030107123323.H58000-100000@cactus.fi.uba.ar>
next in thread | previous in thread | raw e-mail | index | archive | help
Thanks, "pseudo-device bpfilter 2" in the kernel and making "/dev/bpf1" fixed my problem. I am running the dhcp server, so that explains why I could not use /dev/bpf0. Cheers... P.S. - I prefer not to upgrade my O.S. because down time is out of the question. Instead, I upgrade my server progs now and then (from the latest source code if possible). --------- On Tue, 7 Jan 2003, Fernando Gleiser wrote: > On Wed, 8 Jan 2003, Brendan Kosowski wrote: > > > > > I am running FreeBSD 3.4 with the GENERIC kernel which has > > the line "pseudo-device bpfilter 1" uncommented in the config. I also > > re-built and re-installed GENERIC just to be sure. > > > > /dev/bpf0 has "rw" permissions for the owner (root). There are no other > > bpf devices in /dev. > > > > When I su to root and run tcpdump, I get the message > > "tcpdump: /dev/bpf1: No such file or directory". > > Someone else is using bpf0 (dhcp perhaps?), so tcpdump tries to open > bpf1. You only have one bpf in the kernel, so you're out of luck and you'll > have to recompile the kernel. > > Change "pseudo-device bpfilter 1" to "pseudo-device bpfilter 4", rebuild > and reinstall the kernel. Then (or while you're rebuilding the kernel), > go to /dev/ and do './MAKEDEV bpf1' (and 2 and 3). After the reboot, it > should work fine. > > > Fer > > PS: why are you using such an old version? unless you have a very good > reason, you should upgrade > > > > > Can anyone help? > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.1030108135956.347A-100000>