[Guy Harris <guy@xxxxxxxxxxxx>]

On Sep 25, 2003, at 9:19 AM, Ian Schorr wrote:

> Are you superuser when you run Ethereal?  Are you running "sudo 
> ethereal"?
>
> Without proper access Ethereal can't capture from the interface.

Note that, on systems with BPF, there are other ways of getting proper 
access, as per my response to the original mail - "chown 
{your_login_name} /dev/bpf*", done as root, should work (it works on 
all the BSDs I've used, including Mac OS X, although on systems that 
use a devfs, such as Mac OS X and FreeBSD 5.x, that has to be done 
after every reboot, unless the devfs can be configured to set the 
ownership when creating the device node - it looks as if the FreeBSD 
5.x one can, but the Mac OS X one can't; on AIX, they don't appear to 
use devfs, but the devices still appear to disappear across a reboot, 
*and* are created only by tcpdump or the current CVS version of 
tcpdump.org's libpcap, and that has to be done as root).