Question

Trying to start learning tcpdump. However whenever I try to use it rather than giving me a list of adapters when using tcpdump -nS, I get:

tcpdump: WARNING: SIOCGIFADDR: dbus-system: No such device
tcpdump: packet printing is not supported for link type DBUS: use -w

From tcpdump -D:

1. dbus-system
2. dbus-session

From tcpdump -w:

tcpdump version 4.5.1
libpcap version 1.5.1
Was it helpful?

Solution

You need to run tcpdump as root. Otherwise, tcpdump -D will not show all of the possible devices.

Then you need to specify the interface you wish to capture on, with -i:

tcpdump -i eth0

If unspecified, tcpdump searches the system interface list for the lowest numbered, configured up interface (excluding loopback).

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top