From owner-freebsd-questions Wed Dec 2 22:45:40 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id WAA07342 for freebsd-questions-outgoing; Wed, 2 Dec 1998 22:45:40 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from insomnia.local.net (tcs2-33.netwalk.net [206.175.52.97]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA07337 for ; Wed, 2 Dec 1998 22:45:36 -0800 (PST) (envelope-from jmutter@netwalk.com) Received: from localhost (jmutter@localhost) by insomnia.local.net (8.8.8/8.8.8) with ESMTP id BAA00875; Thu, 3 Dec 1998 01:45:16 -0500 (EST) (envelope-from jmutter@netwalk.com) X-Authentication-Warning: insomnia.local.net: jmutter owned process doing -bs Date: Thu, 3 Dec 1998 01:45:16 -0500 (EST) From: "James A. Mutter" Reply-To: jm7996@devrycols.edu To: Roman Katsnelson cc: Ben Smithurst , "q's" Subject: Re: sniffer In-Reply-To: <3665A44D.C8DDB6A@atlas-design.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > No, I was saying that we already have a custom kernel. And it was kind > of a pain to compile, and it finally works and I'd just rather not touch > it. But I guess I *could* keep it around anyway. I don't know. But do I > understand correctly, tcpdump doesn't need any additions to the kernel? > It just needs to be setuid root? No - tcpdump requires that the NIC be in promiscous mode. You need to enable bpfilter in the kernel - there just isn't any way around it. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message