[Bro] how to set the permission of network interface about pcap_open_live
Robin Sommer
robin at icir.org
Wed Aug 23 21:22:12 PDT 2006
On Thu, Aug 24, 2006 at 11:26 +0800, Shine Qi wrote:
> /usr/local/bro/policy/scan.bro,line 133:warning:no such host:b.root-servers.net
Is DNS working on that system?
> at last,have a error message:problem with eth0 - pcap_open_live:socker:Operation not permitted
You don't have sufficient privileges to capture packets. I presume
this is Linux? Then you need to run Bro as root (or apply a kernel
patch: http://www.icir.org/robin/patches/capture_group.html)
Robin
--
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org
ICIR/ICSI * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro
mailing list