From: guy Date: Fri, 15 Jun 2007 20:13:49 +0000 (+0000) Subject: Some systems with BPF have a cloning device; on those systems, you just X-Git-Tag: tcpdump-3.9.7~11 X-Git-Url: https://git.tcpdump.org/tcpdump/commitdiff_plain/bca77d4077775e41c53d7049ddf5485b4a401c58 Some systems with BPF have a cloning device; on those systems, you just open /dev/bpf. --- diff --git a/tcpdump.1 b/tcpdump.1 index 17568b13..225a3b1b 100644 --- a/tcpdump.1 +++ b/tcpdump.1 @@ -1,4 +1,4 @@ -.\" @(#) $Header: /tcpdump/master/tcpdump/Attic/tcpdump.1,v 1.167.2.10 2005-12-05 20:11:19 guy Exp $ (LBL) +.\" @(#) $Header: /tcpdump/master/tcpdump/Attic/tcpdump.1,v 1.167.2.11 2007-06-15 20:13:49 guy Exp $ (LBL) .\" .\" $NetBSD: tcpdump.8,v 1.9 2003/03/31 00:18:17 perry Exp $ .\" @@ -234,7 +234,10 @@ operation, be enabled on that interface. .TP .B Under BSD (this includes Mac OS X): You must have read access to -.IR /dev/bpf* . +.I /dev/bpf* +on systems that don't have a cloning BPF device, or to +.I /dev/bpf +on systems that do. On BSDs with a devfs (this includes Mac OS X), this might involve more than just having somebody with super-user access setting the ownership or permissions on the BPF devices - it might involve configuring devfs