[EMAIL PROTECTED] writes: > > tcpdump needs live packet capture, and whatever that is, we don't have it. > > Yes, Marcus, I realized it from the error message. > But my question is: > > - > tcpdump: live packet capture not supported on this system > what does this term "live packet capture" mean? > (any reference / pointer to a web site would be nice)
It is supported, just perhaps not using the standard interface. The right way is to open the Mach interface for the network, and read packets from that.