When running tcpdump without providing any interface
tcpdump -nS,
tcpdump -nS
I get an error tcpdump: cannot use data link type PKTAP, so I tried to provide the Interface option in the command
tcpdump: cannot use data link type PKTAP
tcpdump -i eth0 or even eth1
tcpdump -i eth0
eth1
then i get the following error
tcpdump: eth1: No such device exists
(BIOCSETIF failed: Device not configured)
I even tried to look on the Internet, but I get no solution ...
Any help?
I can’t talk with your problem with PKTAP, but I can talk with “There is no such device” - eth0 is Linux ism, and MacOS is not Linux. You almost certainly want en0, en1, etc. "Ifconfig -a" is your friend or, if you installed it, "tshark -D".
Any reason why the PKTAP problem occurs
, , libpcap, DLT_PKTAP link-layer, Apple tcpdump - , ( Apple ) , , , , tcpdump -i, , DLT_PKTAP DLT_PKTAP .
DLT_PKTAP
-i