Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 02 Feb 1999 16:02:23 -0500
From:      "Stephen F. Combs" <steve.combs@indsys.ge.com>
To:        Bill Woodford <woodford@cc181716-a.hwrd1.md.home.com>
Cc:        ML FreeBSD Security <security@FreeBSD.ORG>
Subject:   Re: tcpdump
Message-ID:  <36B767DF.1848F5E4@indsys.ge.com>
References:  <19990202153458.A1152@cc181716-a.hwrd1.md.home.com>

next in thread | previous in thread | raw e-mail | index | archive | help
You need to build a kernel with bpfilter enabled.  I've run tcpdump on a
3c509 board many times (it's NOT a true network sniffer, but, it does
allow you to look at packets intercepted by your '509 board!).

Steve Combs
Security Analyst
GE Industrial Systems


Bill Woodford wrote:
> 
> Forgive my ignorance, but I built tcpdump (3.4a3) and libcap (0.4a1) and
> it built beautifully.  I read the docs, and that mentioned a few things to
> watch out for.  However, when I run tcpdump (as root), it gives me:
> 
> tcpdump: /dev/bpf0: Device not configured
> 
> I did a little reading, and realize it's possible that my NIC may not
> support it (it's a 3com 3c509 combo), but how would one tell.  Can anyone
> enlighten me as to the true nature of this error?  Im running natd/ipfw,
> would that interfere with the functioning of tcpdump?  Any help would be
> appreciated.  Thanks.
> 
> --
> Bill Woodford * woodford@cc181716-a.hwrd1.md.home.com * ICQ:14076169
>      "Windows Multitasking: Messing up several things at once."
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?36B767DF.1848F5E4>