From owner-freebsd-isp Wed Jan 21 20:00:42 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id UAA06793 for freebsd-isp-outgoing; Wed, 21 Jan 1998 20:00:42 -0800 (PST) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from allegro.lemis.com (allegro.lemis.com [192.109.197.134]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA06732 for ; Wed, 21 Jan 1998 20:00:25 -0800 (PST) (envelope-from grog@lemis.com) Received: from freebie.lemis.com (freebie.lemis.com [192.109.197.137]) by allegro.lemis.com (8.8.7/8.8.5) with ESMTP id OAA11075; Thu, 22 Jan 1998 14:30:01 +1030 (CST) Received: (from grog@localhost) by freebie.lemis.com (8.8.8/8.8.7) id OAA13526; Thu, 22 Jan 1998 14:30:00 +1030 (CST) (envelope-from grog) Message-ID: <19980122143000.19338@lemis.com> Date: Thu, 22 Jan 1998 14:30:00 +1030 From: Greg Lehey To: Greg Ryan Cc: freebsd-isp@FreeBSD.ORG Subject: Re: tcpdump configuration References: <3.0.5.32.19980122145556.03a1d390@bach> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.84e In-Reply-To: <3.0.5.32.19980122145556.03a1d390@bach>; from Greg Ryan on Thu, Jan 22, 1998 at 02:55:56PM +1100 Organization: LEMIS, PO Box 460, Echunga SA 5153, Australia Phone: +61-8-8388-8286 Fax: +61-8-8388-8725 Mobile: +61-41-739-7062 WWW-Home-Page: http://www.lemis.com/~grog Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, Jan 22, 1998 at 02:55:56PM +1100, Greg Ryan wrote: > Hi All, > > I'm trying to watch the traffic on our network to track down a problem, and > am having trobule configuring tcpdump on either of our freebsd machines. > > I get the error '/dev/bpf0: Device not configured' > > The man pages say that root must have read access to the device but: > > crw------- 1 root wheel 23, 0 Oct 18 22:19 bpf0 > > Have also tried setting exec permission, but no effect. Is there something > i may have missed, or a flag somewhere that (dis)allows promiscuous mode? You need support for BPF in your kernel. It's not there by default in older versions, but it is in newer ones. Add the following line to your kernel config and build a new kernel: pseudo-device bpfilter 16 # Berkeley packet filter Greg