Return to BSD News archive
Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!nntp.coast.net!chi-news.cic.net!newsspool.doit.wisc.edu!night.primate.wisc.edu!news.crd.ge.com!ctrlnews.erie.ge.com!flounder.trans.ge.com!news.ge.com!luss.is.ge.com!not-for-mail
From: jrs@tampa2.is.ge.com (Jim Smithson)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Help on Config bpf0
Date: 15 Feb 1996 12:33:37 -0500
Organization: GEIS
Lines: 28
Message-ID: <4fvqph$ofs@tampa2.is.ge.com>
References: <31211CF2.41C67EA6@cst.com.au> <3121E1B6.FF6D5DF@freebsd.org>
I've put the BPF device in the kernel file and remade the kernel
pseudo-device bpfilter 4 #Berkeley packet filter
# nm /kernel | grep bpfilterattach
f0132c90 T _bpfilterattach
# ls -l /dev/bpf*
crw------- 1 root wheel 23, 0 Oct 10 09:51 /dev/bpf0
But I still cannot run tcpdump:
# tcpdump -i /dev/bpf0 host somehost
tcpdump: /dev/bpf0: Device not configured
ifconfig shows the ix0 device is not in promiscous mode.
# ifconfig -a
lp0: flags=810<POINTOPOINT,SIMPLEX> mtu 1500
ix0: flags=63<UP,BROADCAST,NOTRAILERS,RUNNING> mtu 1500
inet 3.19.228.93 netmask 0xfffffc00 broadcast 3.19.231.255
ether 00:aa:00:57:3a:7e
lo0: flags=8009<UP,LOOPBACK,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
ppp0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552
sl1: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552
tun0: flags=10<POINTOPOINT> mtu 1500
I must be missing something. But what?