undefined | Better HN

0 pointsmsbarnett10y ago0 comments

    $ tcpdump -i lo0 -s 65535 -w info.pcap 
    tcpdump: lo0: You don't have permission to capture on that     device
    ((cannot open BPF device) /dev/bpf0: Permission denied)

Looks like you're logged in on a superuser account or have otherwise somehow disable some security settings.

0 comments

yborg10y ago

I also can't access loopback on 10.11.3, I get this exact error. And I'm running as an Administrator account.

msbarnettOP10y ago

Yeah, it's that they installed Wireshark, and gave it privileges to chown the loopback interfaces.

edit: Irony here is that Wireshark is doing something far more dangerous than 1password.

jlgaddis10y ago

It's either a) change the group on the /dev/bpf entries and add your user to that group or b) run Wireshark as root.

2 more replies

j / k navigate · click thread line to collapse