LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 05-27-2010, 11:56 AM   #1
LorenCarter
LQ Newbie
 
Registered: May 2010
Posts: 3

Rep: Reputation: 0
tcpdump - no suitable device found


All,

I'm running NetWare SLES 10 sp3 with OES2 sp2. I was working with the folks at Novell to resolve an iPrint Print Manager problem.

During the process they wanted to perform a packet capture using tcpdump. While logged in as the root user the error no suitable device was found, and I received no data at all. This server is running on a VMWare Center. On other SLES 10 sp3 systems (residing on that same VMWre Center), tcpdump captures packets just fine. I inherited all of these servers, so I wasn't here during the initial build, but I'd make the guess that they were configured similarly. On a Server that I built recently, tcpdump works fine. On two of my Servers it does not, and gives the mentioned error.

It's not that big a deal, otherwise the Servers are communicating and working just fine. But, I'd like to get it working just because it's supposed to work. Students are off for the summer, so I have time to play.

Any ideas will be welcomed.
thanks
Loren
 
Old 05-27-2010, 06:44 PM   #2
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora, Lubuntu, FreeBSD
Posts: 3,930
Blog Entries: 5

Rep: Reputation: Disabled
What does /sbin/ifconfig show? Try providing the ethernet device explicitly for tcpdump.

Code:
# tcpdump -i <dev_here> host foo.local
 
Old 05-28-2010, 07:16 AM   #3
LorenCarter
LQ Newbie
 
Registered: May 2010
Posts: 3

Original Poster
Rep: Reputation: 0
tcpdump so suitable device found

At the console of the Server (logged in as root), the command:

tcpdump -i eth0

gives me this

tcpdump: socket: Address family not supported by protocol

ifconfig
eth0 Link encap:Ethernet HWaddr 00:50:56:83:38:99
inet addr:xx.xxx.x.xx Bcast:xx.xxx.x.xxx Mask:xxx.xxx.xxx.xxx
inet6 addr: fe80::250:56ff:fe83:3899/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:139079063 errors:29 dropped:0 overruns:0 frame:0
TX packets:174106818 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:558671723 (532.7 Mb) TX bytes:327150160 (311.9 Mb)
Interrupt:177 Base address:0x1400

eth1 Link encap:Ethernet HWaddr 00:50:56:83:00:15
inet addr:xx.xxx.xx.xx Bcast:xx.xxx.xx.xxx Mask:xxx.xxx.xxx.xxx
inet6 addr: fe80::250:56ff:fe83:15/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:12375528 errors:53 dropped:1 overruns:0 frame:0
TX packets:22958715 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:3516426710 (3353.5 Mb) TX bytes:4262922976 (4065.4 Mb)
Interrupt:185 Base address:0x1480

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:2541413 errors:0 dropped:0 overruns:0 frame:0
TX packets:2541413 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2110657027 (2012.8 Mb) TX bytes:2110657027 (2012.8 Mb)

Note: IPv6 support is disabled in all adapters

Loren

Last edited by LorenCarter; 05-28-2010 at 07:26 AM.
 
Old 05-28-2010, 09:58 AM   #4
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora, Lubuntu, FreeBSD
Posts: 3,930
Blog Entries: 5

Rep: Reputation: Disabled
My WAG is something is funky with the way the VM was set up. Check its ethernet device settings closely, and compare against a VM where tcpdump works normally. (Maybe in one case you bridged ethernet devices, and in another case you use NAT... for example.)

Last edited by anomie; 05-28-2010 at 09:59 AM.
 
Old 05-28-2010, 11:17 AM   #5
matpe
LQ Newbie
 
Registered: May 2010
Location: Linköping, Sweden
Distribution: Gentoo
Posts: 13

Rep: Reputation: 2
Quote:
Originally Posted by LorenCarter View Post
tcpdump: socket: Address family not supported by protocol
Your kernel maybe do not have CONFIG_PACKET enabled. Without it you cannot run tcpdump. Try run "modprobe packet" as root and hope it exists as a module.
 
Old 06-07-2010, 10:43 AM   #6
LorenCarter
LQ Newbie
 
Registered: May 2010
Posts: 3

Original Poster
Rep: Reputation: 0
The modprobe packet command on a broke system and a working system both returned the no module found answer (or something like that).

This morning, as I was checking for newly released patches from Novell's site, I saw some new ones, installed them to all my Servers, and now tcpdump works like it ought to. So, maybe the installation of one of the patches "fixed" whatever was causing it not to work.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
NTP - no server suitable for synchronization found ninja master Linux - Software 3 05-25-2010 05:41 AM
[SOLVED] Emacs: no suitable font was found guard Linux - Software 4 10-21-2009 04:46 PM
open office - no suitable windowing system can be found ajzebuski Linux - Software 2 10-18-2007 02:37 PM
no device found tcpdump rid00z Linux - Software 1 09-22-2003 12:23 AM
found svrloc throu tcpdump what does that mean? saavik Linux - Networking 1 06-10-2002 12:26 PM


All times are GMT -5. The time now is 08:57 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration