jaws wrote: > I'm just wondering why im getting this error: > > [root@tracker root]#/usr/sbin/tcpdump -i eth0 > Couldn't find user 'pcap' > > [root@tracker root]# rpm -qa | grep pcap > libpcap-0.7.2-1 I don't use RH, but the error message was "Couldn't find user 'pcap'" and had nothing to do with the library libpcap. Now, being a non-RH user, I don't know what the setup is like. I'm just going by the error message. Why does tcpdump require the user 'pcap'? I'm interested in knowing myself.