From: guy Date: Fri, 15 Jun 2007 20:14:49 +0000 (+0000) Subject: Some systems with BPF have a cloning device; on those systems, you just X-Git-Tag: tcpdump-4.0.0~128 X-Git-Url: https://git.tcpdump.org/tcpdump/commitdiff_plain/6acec44344d3acee7281045aa8fc5ad2ed7fdbdb Some systems with BPF have a cloning device; on those systems, you just open /dev/bpf. --- diff --git a/tcpdump.1 b/tcpdump.1 index e2a1c5cd..ba46f295 100644 --- a/tcpdump.1 +++ b/tcpdump.1 @@ -1,4 +1,4 @@ -.\" @(#) $Header: /tcpdump/master/tcpdump/Attic/tcpdump.1,v 1.183 2007-03-11 04:38:19 guy Exp $ (LBL) +.\" @(#) $Header: /tcpdump/master/tcpdump/Attic/tcpdump.1,v 1.184 2007-06-15 20:14:49 guy Exp $ (LBL) .\" .\" $NetBSD: tcpdump.8,v 1.9 2003/03/31 00:18:17 perry Exp $ .\" @@ -241,7 +241,10 @@ operation, be enabled on that interface. .TP .B Under BSD (this includes Mac OS X): You must have read access to -.IR /dev/bpf* . +.I /dev/bpf* +on systems that don't have a cloning BPF device, or to +.I /dev/bpf +on systems that do. On BSDs with a devfs (this includes Mac OS X), this might involve more than just having somebody with super-user access setting the ownership or permissions on the BPF devices - it might involve configuring devfs