maybe out of topic

maybe out of topic

[jaws]

I'm just wondering why im getting this error:

[root@tracker root]#/usr/sbin/tcpdump -i eth0
Couldn't find user 'pcap'

[root@tracker root]# rpm -qa | grep pcap
libpcap-0.7.2-1

Do I missed something?

I'm using RH9.0.

Thanks.


-- 

jaws

---------------
Computer system security is a journey, not a destination

Re: maybe out of topic

[Ralf Spenneberg]

Am Fre, 2003-08-29 um 03.01 schrieb jaws:
> I'm just wondering why im getting this error:
> 
> [root@tracker root]#/usr/sbin/tcpdump -i eth0
> Couldn't find user 'pcap'
You need the following entry in your /etc/passwd file:
pcap:x:77:77::/var/arpwatch:/bin/nologin

This was taken from a stock RH9 machine.

Cheers,

Ralf
-- 
Ralf Spenneberg
RHCE, RHCX

Book: Intrusion Detection für Linux Server   http://www.spenneberg.com
IPsec-Howto				     http://www.ipsec-howto.org
Honeynet Project Mirror:                     http://honeynet.spenneberg.org

Re: maybe out of topic

[cc]

jaws wrote:

> I'm just wondering why im getting this error:
> 
> [root@tracker root]#/usr/sbin/tcpdump -i eth0
> Couldn't find user 'pcap'
> 
> [root@tracker root]# rpm -qa | grep pcap
> libpcap-0.7.2-1

I don't use RH, but the error message was
"Couldn't find user 'pcap'" and had nothing
to do with the library libpcap.

Now, being a non-RH user, I don't know what
the setup is like.  I'm just going by the
error message.

Why does tcpdump require the user 'pcap'?
I'm interested in knowing myself.