Wireshark · Ethereal-dev: Re: [ethereal-dev] AIX: gtk problem solved, now an ethereal problem

[Guy Harris <gharris@xxxxxxxxxxxx>]

> I changed the line, and here is what I get back:
> 
> Failed to open lo0 with pcap_open_live(), pch is NULL

That's not printing the error string you got back from
"pcap_open_live()".  Try:

   if (pch == NULL)                                                     
      printf("Failed to open %s with pcap_open_live, error=%s\n",ifr->ifr_name,err_str);      
    else                                                                
      printf("Opened %s with pcap_open_live, pch=%p\n",ifr->ifr_name,pch);

> Just for kicks, just after running this program,
> I tried running AIX's tcpdump:
> 
> # tcpdump
> tcpdump: BIOCSETIF: en0: Do not specify an existing file. 

Oh, dear.  That doesn't look good.  Any idea to what "errno" value, if
any, the error "Do not specify an existing file" corresponds?

> As a non-root user, I tried it and got:
> ~% tcpdump
> tcpdump: error loading /usr/lib/drivers/bpf

It may be trying to load the BPF kernel driver, or something, and
failing to do so because you're not root - although presumably the
"tcpdump" run as root already loaded it.

I wonder if it gets automatically unloaded, but has to be manually
loaded, or something ugly such as that?