* maybe out of topic @ 2003-08-29 1:01 jaws 2003-08-31 10:42 ` Ralf Spenneberg 2003-09-01 1:47 ` cc 0 siblings, 2 replies; 3+ messages in thread From: jaws @ 2003-08-29 1:01 UTC (permalink / raw) To: netfilter I'm just wondering why im getting this error: [root@tracker root]#/usr/sbin/tcpdump -i eth0 Couldn't find user 'pcap' [root@tracker root]# rpm -qa | grep pcap libpcap-0.7.2-1 Do I missed something? I'm using RH9.0. Thanks. -- jaws --------------- Computer system security is a journey, not a destination ^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: maybe out of topic 2003-08-29 1:01 maybe out of topic jaws @ 2003-08-31 10:42 ` Ralf Spenneberg 2003-09-01 1:47 ` cc 1 sibling, 0 replies; 3+ messages in thread From: Ralf Spenneberg @ 2003-08-31 10:42 UTC (permalink / raw) To: jaws; +Cc: Netfilter Am Fre, 2003-08-29 um 03.01 schrieb jaws: > I'm just wondering why im getting this error: > > [root@tracker root]#/usr/sbin/tcpdump -i eth0 > Couldn't find user 'pcap' You need the following entry in your /etc/passwd file: pcap:x:77:77::/var/arpwatch:/bin/nologin This was taken from a stock RH9 machine. Cheers, Ralf -- Ralf Spenneberg RHCE, RHCX Book: Intrusion Detection für Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org ^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: maybe out of topic 2003-08-29 1:01 maybe out of topic jaws 2003-08-31 10:42 ` Ralf Spenneberg @ 2003-09-01 1:47 ` cc 1 sibling, 0 replies; 3+ messages in thread From: cc @ 2003-09-01 1:47 UTC (permalink / raw) To: Netfilter Group jaws wrote: > I'm just wondering why im getting this error: > > [root@tracker root]#/usr/sbin/tcpdump -i eth0 > Couldn't find user 'pcap' > > [root@tracker root]# rpm -qa | grep pcap > libpcap-0.7.2-1 I don't use RH, but the error message was "Couldn't find user 'pcap'" and had nothing to do with the library libpcap. Now, being a non-RH user, I don't know what the setup is like. I'm just going by the error message. Why does tcpdump require the user 'pcap'? I'm interested in knowing myself. ^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2003-09-01 1:47 UTC | newest] Thread overview: 3+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2003-08-29 1:01 maybe out of topic jaws 2003-08-31 10:42 ` Ralf Spenneberg 2003-09-01 1:47 ` cc
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox