Re: [tcpdump-workers] pcap_lookupdev returning NULL

2020-11-05 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Nov 5, 2020, at 1:04 AM, Vaughan Wickham wrote: > Appreciate all the info that you have provided. > > Although it probably doesn't look like it from my questions; I did actually > read some tutorials prior to posting my initial question; and none made > reference to

Re: [tcpdump-workers] pcap_lookupdev returning NULL

2020-11-05 Thread Vaughan Wickham via tcpdump-workers
--- Begin Message --- content filtering: check whitelisting Hello Guy, Appreciate all the info that you have provided. Although it probably doesn't look like it from my questions; I did actually read some tutorials prior to posting my initial question; and none made reference to the need for:

Re: [tcpdump-workers] pcap_lookupdev returning NULL

2020-11-04 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Nov 4, 2020, at 10:26 PM, Vaughan Wickham wrote: > In regards to your latest comments regarding > > sudo setcap cap_net_raw,cap_net_admin+eip {your program} > > Are you saying that I need to compile my program and then start the compiled > version with these

Re: [tcpdump-workers] pcap_lookupdev returning NULL

2020-11-04 Thread Vaughan Wickham via tcpdump-workers
--- Begin Message --- content filtering: check whitelisting Hello Guy, In regards to your latest comments regarding sudo setcap cap_net_raw,cap_net_admin+eip {your program} Are you saying that I need to compile my program and then start the compiled version with these arguments, from a

Re: [tcpdump-workers] pcap_lookupdev returning NULL

2020-11-04 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Nov 4, 2020, at 9:18 PM, Vaughan Wickham wrote: > Version: libpcap version 1.5.3 That's an older version (CentOS, proudly trailing-edge!), and only returns interfaces that the program can open. Capturing on Linux generally requires, at minimum, the CAP_NET_RAW

Re: [tcpdump-workers] pcap_lookupdev returning NULL

2020-11-04 Thread Guy Harris via tcpdump-workers
--- Begin Message --- What happens if you put printf("Version: %s\n", pcap_lib_version()); before the pcap_lookupdev() call? It won't fix the pcap_lookupdev() call not to return NULL, but it'll indicate what version of libpcap your program is using, which might help determine what the