tcpdump, ntop & libpcap

[Theo Wawers]

Hi there,

I tried to install the two tools tcpdump and ntop. They both need to have libpcap installed first. But both packages do not work and display the same error message:
Can't find PPA for /dev/lan4

Has anybody seen this before ?

OS: hpux 11.0 HW: V2250

[Lasse Knudsen]

Yes I've seen this before (been there done it).

Now I am not an expert in programming towards the net interface, but I got around it just uncommenting the code that causes this error to show.

I would expect that this is not the final answer but it worked for me - you need to build libpcap yourself thoug.

The code to comment out/delete in pcap-dlpi.c is the if clause beginning with (4 lines):

if (i == ap->dl_count)

Hope you can get further now

[Lasse Knudsen]

OK more to add - this is a known issue on the Net.

just run tcpdump -i /dev/dlpi4

I imagine that it is '4' you should use but you can check using lanscan. The NMID of your interface is the field to use.