Ethereal-users: Re: [ethereal-users] Re: Ethereal 0.7.8 compilation problem NOW running problem

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Thu, 25 Nov 1999 01:32:09 -0800
> The capture session could not be initiated (/dev/bpf0: No such file or
> directory). Please check permissions and proper interface
> 
> Ok, don't have a bpf0/1,

That's a bit odd.  It sounds as if your "libpcap" thinks it should be
using BPF...

...but that's not what it should use on Linux, as far as I know;
"/dev/bpf" is a BSDism.

> but according to different info and readme's tcpdump should do it
> (right?)

"tcpdump" should use "libpcap", just as Ethereal does, and thus should
use SOCK_PACKET, say, on Linux.

Does "tcpdump" work?

If so, is it linked statically or dynamically with "libpcap"?

If it's linked dynamically, is Ethereal linked dynamically with
"libpcap" as well, and is it linked with the *same* "libpcap"?  (Use
"ldd" to see what shared libraries a program is linked with.)

If they're both linked statically with "libpcap", can you find out
*which* "libpcap" they're linked with?  Is it a "libpcap" library that
came with SuSE, or one you configured and installed yourself?

> creating the bpf dev's doesnt work (also according to trying and docu).

Some documentation said to create "/dev/bpf" devices on *Linux*?  What
documentation was that?