tcpdump mailing list archives

Re: Libpcap and Super User mode


From: Jefferson Ogata <Jefferson.Ogata () noaa gov>
Date: Wed, 30 Jun 2004 13:00:55 -0400

sthaug () nethelp no wrote:
Is it possible to write a program using libpcap that doesnt need to be run in super user mode, and if there is how 
would that be done.  Everything that i have seen that uses libpcap has to be in su mode

At least on BSD based systems, it depends on readability of the /dev/bpf*
devices and not on super user mode. Normally /dev/bpf* is only readable
by root, but you can change this.

More specifically, you can use libpcap as any user. On most systems, you have to be root, however, to monitor traffic on a network interface.

--
Jefferson Ogata <Jefferson.Ogata () noaa gov>
NOAA Computer Incident Response Team (N-CIRT) <ncirt () noaa gov>

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Current thread: