Re: Permission denied wrigint second file when using

["John Bourke" <John.Bourke () MobileInternet com>]

Hello,

I found the pcap user, created a directory in it's name, started my tcpdump
command below, and it worked !

In order for this to work every time in every directory I set user pcap's
uid to 0.  This was tested and worked ok.

Is there a more elegant way to do this rather than having pcap have root
privilages ?

John


-----Original Message-----
From: tcpdump-workers-owner () lists tcpdump org
[mailto:tcpdump-workers-owner () lists tcpdump org] On Behalf Of Jefferson
Ogata
Sent: 13 September 2006 19:22
To: tcpdump-workers () lists tcpdump org
Subject: Re: [tcpdump-workers] Permission denied wrigint second file when
using

On 2006-09-13 17:16, John Bourke wrote:
> I have a problem with using tethereal to capture and write series of
files.
> The first file writes ok, so there cannot be an issue with file access of
> any type.  The second file gives an error.

I doubt tethereal has anything to do with this.

> [root@Linux root]# mkdir test
> [root@Linux root]# cd test
> [root@Linux test]# ls -l
> total 0
> [root@Linux test]# /usr/sbin/tcpdump -i eth0 -w test.cap -s 0 -C 1
> tcpdump: listening on eth0
> tcpdump: test.cap2: Permission denied
> [root@Linux test]# ls -l
> total 984
> -rw-r--r--    1 root     root      1000531 Sep 13 11:36 test.cap
> [root@Linux test]#
>
> Any ideas ?

The directory needs to be writable by the local tcpdump user, which may
be "pcap".

-- 
Jefferson Ogata <Jefferson.Ogata () noaa gov>
NOAA Computer Incident Response Team (N-CIRT) <ncirt () noaa gov>
"Never try to retrieve anything from a bear."--National Park Service
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.