Topic
  • 7 replies
  • Latest Post - ‏2012-04-19T18:15:03Z by JakobRiisHenriksen
HarishSandilya
HarishSandilya
10 Posts

Pinned topic tcpdump bpf_load error

‏2011-08-10T14:19:57Z |
Hello All,

We have an Power 6 p595 server. In on of the LPAR when we try to issue tcpdump command it is throwing the following error, the LPAR have only one IP address set on it for ent0.

  1. tcpdump -i ent0
bpf_load: could not load driver:

  1. tcpdump
tcpdump: no suitable device found

Please help me in this regard.
Updated on 2012-04-19T18:15:03Z at 2012-04-19T18:15:03Z by JakobRiisHenriksen
  • SystemAdmin
    SystemAdmin
    6902 Posts

    Re: tcpdump bpf_load error

    ‏2011-08-10T15:39:24Z  
    Try tcpdump -i en0. Also, ensure you're running as root.
  • SystemAdmin
    SystemAdmin
    6902 Posts

    Re: tcpdump bpf_load error

    ‏2011-08-10T16:22:37Z  
    If you want to listen / capture the packets only from a specific device, then use "host <ip address of the destination>" parameter.

    -w for updating the information on a mentioned file.

    tcpdump -i en0 -w <filename> host <ip address of destination>

    The above command required root access.
    Kannan
  • HarishSandilya
    HarishSandilya
    10 Posts

    Re: tcpdump bpf_load error

    ‏2011-08-11T02:47:36Z  
    If you want to listen / capture the packets only from a specific device, then use "host <ip address of the destination>" parameter.

    -w for updating the information on a mentioned file.

    tcpdump -i en0 -w <filename> host <ip address of destination>

    The above command required root access.
    Kannan
    Hi Kannan,

    I was trying as root and tried for both ento and en0 redirecting the output to a file. But the result is the same:
    1. tcpdump -i en0 -w /tmp/tcpdumpfile
    tcpdump: bpf_load: could not load driver: The file access permissions do not allow the specified action.
    1. tcpdump -i ent0 -w /tmp/tcpdumpfile
    tcpdump: bpf_load: could not load driver: The file access permissions do not allow the specified action.
    #
  • Holgervk
    Holgervk
    56 Posts

    Re: tcpdump bpf_load error

    ‏2011-08-11T21:21:29Z  
    does iptrace run?

    lssrc -s iptrace

    tells you
  • christianIBM
    christianIBM
    6 Posts

    Re: tcpdump bpf_load error

    ‏2011-08-12T19:47:38Z  
    • Holgervk
    • ‏2011-08-11T21:21:29Z
    does iptrace run?

    lssrc -s iptrace

    tells you
    Test post
  • christianIBM
    christianIBM
    6 Posts

    Re: tcpdump bpf_load error

    ‏2011-08-12T20:13:04Z  
    Test post
    test again
  • JakobRiisHenriksen
    JakobRiisHenriksen
    3 Posts

    Re: tcpdump bpf_load error

    ‏2012-04-19T18:15:03Z  
    I had the same issue and errors when trying to do this on a wpar.
    The solution / work-around was to run tcpdump on the lpar hosting the wpar on the relevant interface