*BSD News Article 87683


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!feed1.news.erols.com!arclight.uoregon.edu!news.bbnplanet.com!su-news-hub1.bbnplanet.com!newsxfer3.itd.umich.edu!howland.erols.net!math.ohio-state.edu!jussieu.fr!eurocontrol.fr!polaris.eurocontrol.fr!not-for-mail
From: roberto@eurocontrol.fr (Ollivier Robert)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: tcpdump of ppp?
Date: 3 Feb 1997 15:53:41 GMT
Organization: Eurocontrol EEC, Bretigny, France
Lines: 22
Message-ID: <5d51m5$qj9$1@polaris.eurocontrol.fr>
References: <5d4uuf$113@chronicle.concentric.net>
NNTP-Posting-Host: caerdonn.eurocontrol.fr
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Newsposter: Pnews 4.0-test52 (20 Jan 97)
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:34646

    [courtesy cc of this posting sent to cited author via email]

In article <5d4uuf$113@chronicle.concentric.net>,
Rick Slater <Slater@cris.com> wrote:
> The ppp documentation claims that one can use tcpdump with it,
> but when I point tcpdump at /dev/tun it comes up with the error
> message "/dev/bpf improperly configured" and then exits.

You must have the following:

- as many /dev/bpf* as you need simultaneously,

- "pseudo-device bpfilter N" in your kernel configuration file

- when you boot, it should shows "bpfN: attached" for all the netwokring
  devices.

If you have this three things right, you should be able to use '-i tun0'
with tcpdump.
-- 
Ollivier ROBERT   -=- Eurocontrol EEC/TS -=-   Ollivier.Robert@eurocontrol.fr
FreeBSD FAQ: <URL:http://www.FreeBSD.org/FAQ/>