On 5/28/07, Can Erkin Acar <[EMAIL PROTECTED]> wrote:
The inability to get a coredump is normal. Tcpdump uses privilege separation and the part that drops its privileges segfaults. Since it was a privileged program, and is no longer root, it is not allowed to coredump even with kern.nosuidcoredump=0
i just committed a patch to facilitate debugging things like this. set nosuidcoredump=2 and you will get a dump in /var/crash. this option is only for debugging, you don't want it all the time.
