Ethereal-users: Re: [Ethereal-users] MacOS X 10.3 [getting started]

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 2 Apr 2004 19:24:14 -0800
On Fri, Apr 02, 2004 at 05:46:26PM +0100, Craig.Roberts@xxxxxxx wrote:
> I can run ethereal from the Fink Commander 'package file browser', but no 
> interface appears.

I.e., there are no interfaces in the drop-down list when you try to
capture?

On many OSes, you need appropriate privileges in order to capture
packets.  On systems with BPF, such as OS X, this means you need to run
as a user with sufficient privileges to open the BPF devices.

That means you must either

	1) run Ethereal as root (e.g., with "sudo")

or

	2) change the ownership of the BPF devices to yourself (which
	   you'd have to do as root, with "sudo") - on OS X, you'd have
	   to do this just before the first time you run Ethereal after
	   a reboot, as the BPF devices are not on disk (they're in
	   devfs).

To do 2), if your login name is, for example, "craig", you'd do, in a
Terminal window:

	sudo chown craig /dev/bpf*