| Subject: | lookupdev even when reading from a savefile |
There is a bug in pcaputils.pm loop routine.
First, when DEV argument is not specified, Net::Pcap::lookupdev is
called to find the default capture device.
Next, regardless of DEV or SAVEFILE arguments, Net::Pcap::lookupnet is
called to retrieve parameters about the capture device.
I believe both of these items are moot when reading packets from a
savefile.
Here's why they cause problems:
The call to lookupdev requires priveledge. This call consistently
fails unless I'm running as root. No problem when capturing from a
live interface, but a silly requirement when reading from a savefile.
The call to lookupnet fails when the chosen pcap device is
unconfigured. This may be a problem for people trying to capture from
unconfigured devices, but it's also a (slightly sillier) problem for
people trying to read packets from a savefile.
In my case, to use the modules as they are to read from a savefile I
need to:
1) be root
2) have an established link on my default capture device
1 is doable.
2 is very tricky when not near another ethernet port. Media sense
takes the interface down when cables are unplugged (OSX).