Am Fre, 2003-08-29 um 03.01 schrieb jaws: > I'm just wondering why im getting this error: > > [root@tracker root]#/usr/sbin/tcpdump -i eth0 > Couldn't find user 'pcap' You need the following entry in your /etc/passwd file: pcap:x:77:77::/var/arpwatch:/bin/nologin This was taken from a stock RH9 machine. Cheers, Ralf -- Ralf Spenneberg RHCE, RHCX Book: Intrusion Detection für Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org
