Issue with tcpdump

[girishb]

Hi All,

Having problem with tcpdump command on RHEL. We are experiencing "Couldn't find user 'pcap'"

Example:
[root@server root]# tcpdump -i eth0 icmp
Couldn't find user 'pcap'

I need to solve this urgently.

Thanks in advance for the response.

Girish

[Stuart Browne]

http://lists.planet-lab.org/pipermail/users/2005-July/001562.html

Long answer:

The install routine that adds the 'pcap' user sometimes doesn't do it properly. This has been reported to various buglists etc. but as yet doesn't appear to have been fully resolved.

Short answer/fix:

Manually add the user. Decent command line is in that URL.

[Ivan Ferreira]

Try just adding the pcap user:

adduser pcap

May be required to run tcpdump.

[girishb]

Thanks folks.

useradd pcap has worked.

[girishb]

Thanks folks