From owner-freebsd-gnome@FreeBSD.ORG  Fri Sep 26 09:34:58 2003
Return-Path: <owner-freebsd-gnome@FreeBSD.ORG>
Delivered-To: freebsd-gnome@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 652EC16A4B3
	for <freebsd-gnome@freebsd.org>; Fri, 26 Sep 2003 09:34:58 -0700 (PDT)
Received: from blacklamb.mykitchentable.net
	(207-173-226-17.bras01.elk.ca.frontiernet.net [207.173.226.17])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1E87E4400D
	for <freebsd-gnome@freebsd.org>;
	Fri, 26 Sep 2003 09:34:55 -0700 (PDT)
	(envelope-from drew@mykitchentable.net)
Received: from L035522 (unknown [165.107.22.101])
	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
	(No client certificate requested)
	by blacklamb.mykitchentable.net (Postfix) with ESMTP id F1B583BF51A
	for <freebsd-gnome@freebsd.org>; Fri, 26 Sep 2003 09:34:53 -0700 (PDT)
Message-ID: <001901c3844c$15033ae0$65166ba5@lc.ca.gov>
From: "Drew Tomlinson" <drew@mykitchentable.net>
To: "FreeBSD Gnome" <freebsd-gnome@freebsd.org>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Subject: bpf Devices - What's Using Them?
X-BeenThere: freebsd-gnome@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: GNOME for FreeBSD -- porting and maintaining
	<freebsd-gnome.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gnome>,
	<mailto:freebsd-gnome-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-gnome>
List-Post: <mailto:freebsd-gnome@freebsd.org>
List-Help: <mailto:freebsd-gnome-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gnome>,
	<mailto:freebsd-gnome-request@freebsd.org?subject=subscribe>
Date: Fri, 26 Sep 2003 16:34:58 -0000
X-Original-Date: Fri, 26 Sep 2003 09:34:38 -0700
X-List-Received-Date: Fri, 26 Sep 2003 16:34:58 -0000

I have a 4.8 machine with bpf compiled in the kernel.  'll /dev/bpf*'
shows:

crw-------  1 root  wheel   23,   0 Sep 26 06:22 bpf0
crw-------  1 root  wheel   23,   1 Mar 14  2003 bpf1
crw-------  1 root  wheel   23,   2 Mar 14  2003 bpf2
crw-------  1 root  wheel   23,   3 Mar 14  2003 bpf3

If I attempt to run nmap, I get this error:

pcap_open_live: (no devices found) /dev/bpf4: No such file or directory

I know I can make more bpf devices but how can I find what using the
ones that are already there?  I do have 3 NICs on this machine and am
running ntop sniffing all NICs so I assume that accounts for 3 bpf
devices.  What might be using the fourth?

Thanks,

Drew