From owner-freebsd-questions Mon Oct 5 12:03:25 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA04981 for freebsd-questions-outgoing; Mon, 5 Oct 1998 12:03:25 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from rucus.ru.ac.za (rucus.ru.ac.za [146.231.29.2]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id MAA04514 for ; Mon, 5 Oct 1998 12:01:35 -0700 (PDT) (envelope-from nbm@rucus.ru.ac.za) Received: (qmail 24896 invoked by uid 1003); 5 Oct 1998 18:53:47 -0000 Message-ID: <19981005205347.A22378@rucus.ru.ac.za> Date: Mon, 5 Oct 1998 20:53:47 +0200 From: Neil Blakey-Milner To: "Alain G. Fabry" , freebsd-questions@FreeBSD.ORG Subject: Re: sniffit can't open device References: <019901bdee47$2bd80cf0$5531d5c6@earth.coserve.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.93.2i In-Reply-To: <019901bdee47$2bd80cf0$5531d5c6@earth.coserve.org>; from Alain G. Fabry on Fri, Oct 02, 1998 at 03:56:48PM -0500 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri 1998-10-02 (15:56), Alain G. Fabry wrote: > Why can't it open the de0? > > #sniffit -F de0 -t ip-address > Forcing device to de0 (user requested)... > Make sure you have read the docs carefully. > Couldn't open device. Do you have BPFILTERs compiled into your kernel? Also, do /dev/bpf* exist. (cd /dev && sh MAKEDEV bpf[012]) Finally, do you have _enough_ bpf's compiled in and devices made for them? Each process such as arpwatch, sniffit, etc, uses a new bpf device. Neil -- Neil Blakey-Milner nbm@rucus.ru.ac.za To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message