From owner-freebsd-questions  Fri Aug 29 08:28:57 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id IAA09877
          for questions-outgoing; Fri, 29 Aug 1997 08:28:57 -0700 (PDT)
Received: from d2si.com (macbeth.d2si.com [206.8.31.2])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id IAA09870
          for <freebsd-questions@FreeBSD.ORG>; Fri, 29 Aug 1997 08:28:44 -0700 (PDT)
Received: (from alec@localhost)
	by d2si.com (8.8.5/8.8.5) id KAA10293;
	Fri, 29 Aug 1997 10:28:22 -0500 (CDT)
From: Alec Kloss <alec@d2si.com>
Message-Id: <199708291528.KAA10293@d2si.com>
Subject: Re: tcpdump
In-Reply-To: <91DD7FDA88E4D011BED00000C0DD87E70ACA21@pds-gateway.pdspc.com> from Kenny Hanson at "Aug 29, 97 10:01:10 am"
To: khanson@pdspc.com (Kenny Hanson)
Date: Fri, 29 Aug 1997 10:28:22 -0500 (CDT)
Cc: freebsd-questions@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL31 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Kenny Hanson said:
> TWIMC:
> 	I am trying to use tcpdump to take a look at incoming/outgoing
> tcp packets.  tcpdump is complaining that /dev/bpf0 is not configured.
> I read through the bpf(4) man page but it doesn't describe how to
> create such a device.  Could somebody please share the command to
> create /dev/bpf?  Thanx in advance...
> 
> 	Kenny Hanson, Senior Research Analyst
> 	Paragon Development Systems
> 	Email: 	khanson@pdspc.com
> 	Web: 	http://www.pdspc.com
> 	Phone:	(800) 966-6090
> 

You'll need to use MAKEDEV to make the device nodes and you'll have 
to compile bpf into your kernel by adding a configuration line like

        pseudo-device bpfilter 4

to get 4 devices.  After you've recompiled and rebooted, type (as
root)
        # cd /dev
        # ./MAKEDEV bpf0
        # ./MAKEDEV bpf1
        # ./MAKEDEV bpf2
        # ./MAKEDEV bpf3

For as many devices as you created.