From owner-freebsd-isp  Wed Jan 21 20:19:25 1998
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id UAA08345
          for freebsd-isp-outgoing; Wed, 21 Jan 1998 20:19:25 -0800 (PST)
          (envelope-from owner-freebsd-isp@FreeBSD.ORG)
Received: from fly.HiWAAY.net (root@fly.HiWAAY.net [208.147.154.56])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA08340
          for <freebsd-isp@FreeBSD.ORG>; Wed, 21 Jan 1998 20:19:23 -0800 (PST)
          (envelope-from sprice@HiWAAY.net)
Received: from bonsai.hiwaay.net (tnt1-199.HiWAAY.net [208.147.147.199])
	by fly.HiWAAY.net (8.8.8/8.8.6) with SMTP id WAA21301;
	Wed, 21 Jan 1998 22:07:30 -0600 (CST)
Message-ID: <34C6C633.28D95ABC@hiwaay.net>
Date: Wed, 21 Jan 1998 22:08:19 -0600
From: Steve Price <sprice@HiWAAY.net>
X-Mailer: Mozilla 3.04Gold (X11; I; FreeBSD 3.0-CURRENT i386)
MIME-Version: 1.0
To: Greg Ryan <greg@safetyweb.com.au>
CC: freebsd-isp@FreeBSD.ORG
Subject: Re: tcpdump configuration
References: <3.0.5.32.19980122145556.03a1d390@bach>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Greg Ryan wrote:
> 
> Hi All,
> 
> I'm trying to watch the traffic on our network to track down a problem, and
> am having trobule configuring tcpdump on either of our freebsd machines.
> 
> I get the error '/dev/bpf0: Device not configured'
> 
> The man pages say that root must have read access to the device but:
> 
> crw-------  1 root  wheel   23,   0 Oct 18 22:19 bpf0
> 
> Have also tried setting exec permission, but no effect. Is there something
> i may have missed, or a flag somewhere that (dis)allows promiscuous mode?
>

steve[/usr/src/sys/i386/conf]$ grep "packet filter" LINT
pseudo-device   bpfilter        4       #Berkeley packet filter
steve[/usr/src/sys/i386/conf]$ 

You should add this line to your kernel config file and from
/usr/src/sys/i386/conf do the following:

config your_kernel_config_filename
cd ../../compile/your_kernel_config_filename
make clean depend all install

Steve

> Thanks in advance,
> Greg
> 
> --
> SafetyWeb Internet Solutions Pty Ltd
> Suite 1101, Capital Tower
> Canberra City ACT 2601
> Australia
> 
> +61 02 6257 9901 Telephone
> +61 02 6257 9904 Technical Support
> +61 02 6257 9902 Fax
> 
> greg@safetyweb.com.au
> http://www.safetyweb.com.au