[tcpdump-workers] tcpdump 4.0.0rc2 and libpcap 1.0.0rc2 now available

2008-10-15 Thread Ken Bantoft
Hi, I uploaded Release Candidate 2 to http://www.tcpdump.org/beta this evening - please give it a test and make sure it works as you expect. I'm want to ship it by the end of the month (this time, I promise!), as it's been stable for quite some time now, and it's long overdue. Ken - T

Re: [tcpdump-workers] Capturing without having superuser rights

2008-10-15 Thread Jesse Kempf
Guy Harris wrote: On Oct 14, 2008, at 9:30 AM, Max Laier wrote: > Depends on the platform you are on. On FreeBSD all you need is read > write > permission to the /dev/bpf* devices. Also true in NetBSD, OpenBSD, DragonFly BSD, Mac OS X, and, I think, AIX. (And, at least with some versions

Re: [tcpdump-workers] Capturing without having superuser rights

2008-10-15 Thread Guy Harris
On Oct 14, 2008, at 9:30 AM, Max Laier wrote: Depends on the platform you are on. On FreeBSD all you need is read write permission to the /dev/bpf* devices. Also true in NetBSD, OpenBSD, DragonFly BSD, Mac OS X, and, I think, AIX. (And, at least with some versions of libpcap, all you ne

Re: [tcpdump-workers] Capturing without having superuser rights

2008-10-15 Thread Damien ANCELIN
I doesn't know POSIX capabilities and it seems to be very interesting. I think it's a good first step, but I see a potential problem : if I give CAP_NET_ADMIN capability to a user, he can do what he wants on all ethernet interfaces, isn't it ? In my case, I have for example 1 interface used for

Re: [tcpdump-workers] Capturing without having superuser rights

2008-10-15 Thread Gerald Combs
Under Linux you can use POSIX capabilities to capture as non-root. CAP_NET_RAW lets you capture, and CAP_NET_ADMIN lets you use promiscuous mode. Damien ANCELIN wrote: > To give you more informations : > - "metrology platform" will be a computer that can be used by many users > to capture packets

Re: [tcpdump-workers] Capturing without having superuser rights

2008-10-15 Thread Damien ANCELIN
To give you more informations : - "metrology platform" will be a computer that can be used by many users to capture packets (coming from a mirroring port of a switch). - It's currently running on an linux debian. It seems there is no common manner to do this in a simple way (I will have a look