From owner-freebsd-questions  Tue Jan  7 19:35:13 2003
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 28BD237B401
	for <freebsd-questions@freebsd.org>; Tue,  7 Jan 2003 19:35:10 -0800 (PST)
Received: from garfield.bmk.com.au (bmkind.lnk.telstra.net [139.130.51.118])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B207043EDC
	for <freebsd-questions@freebsd.org>; Tue,  7 Jan 2003 19:35:06 -0800 (PST)
	(envelope-from brendan@bmk.com.au)
Received: from localhost (brendan@localhost)
	by garfield.bmk.com.au (8.9.3/8.9.3) with SMTP id OAA00436;
	Wed, 8 Jan 2003 14:34:53 +1100 (EST)
	(envelope-from brendan@bmk.com.au)
Date: Wed, 8 Jan 2003 14:34:53 +1100 (EST)
From: Brendan Kosowski <brendan@bmk.com.au>
To: Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
Cc: FreeBSD Questions <freebsd-questions@freebsd.org>
Subject: Re: tcpdump problem
In-Reply-To: <20030107123323.H58000-100000@cactus.fi.uba.ar>
Message-ID: <Pine.BSF.3.96.1030108135956.347A-100000@garfield.bmk.com.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


Thanks, "pseudo-device bpfilter 2" in the kernel and making "/dev/bpf1"
fixed my problem.

I am running the dhcp server, so that explains why I could not use
/dev/bpf0.


Cheers...

P.S. - I prefer not to upgrade my O.S. because down time is out of the
question. Instead, I upgrade my server progs now and then (from the latest
source code if possible).

---------


On Tue, 7 Jan 2003, Fernando Gleiser wrote:

> On Wed, 8 Jan 2003, Brendan Kosowski wrote:
> 
> >
> > I am running FreeBSD 3.4 with the GENERIC kernel which has
> > the line "pseudo-device bpfilter 1" uncommented in the config. I also
> > re-built and re-installed GENERIC just to be sure.
> >
> > /dev/bpf0 has "rw" permissions for the owner (root). There are no other
> > bpf devices in /dev.
> >
> > When I su to root and run tcpdump, I get the message
> > "tcpdump: /dev/bpf1: No such file or directory".
> 
> Someone else is using bpf0 (dhcp perhaps?), so tcpdump tries to open
> bpf1. You only have one bpf in the kernel, so you're out of luck and you'll
> have to recompile the kernel.
> 
> Change "pseudo-device bpfilter 1" to "pseudo-device bpfilter 4", rebuild
> and reinstall the kernel. Then (or while you're rebuilding the kernel),
> go to /dev/ and do './MAKEDEV bpf1' (and 2 and 3). After the reboot, it
> should work fine.
> 
> 
> 			Fer
> 
> PS: why are you using such an old version? unless you have a very good
> reason, you should upgrade
> 
> >
> > Can anyone help?
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
> >
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message