how to set the permission of network interface about pcap_open_live

Zeek
1

Hi,everybody:

  I just install bro program,while I run it with "bro -i eth0 mt",many warning message occured,they like followed:
  /usr/local/bro/policy/hot.bro,line 30:warning:no such host:ph33r.the.eleet.com
  /usr/local/bro/policy/scan.bro,line 104:warning:no such host:scooter2.sv.av.com
  /usr/local/bro/policy/scan.bro,line 133:warning:no such host:b.root-servers.net

  at last,have a error message:problem with eth0 - pcap_open_live:socker:Operation not permitted
  
  what should I do?
  thanks very much!

  cheers

¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡ Shine Qi
¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡shine_qi@sina.com
¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡2006-08-24

2

  /usr/local/bro/policy/scan.bro,line 133:warning:no such host:b.root-servers.net

Is DNS working on that system?

  at last,have a error message:problem with eth0 - pcap_open_live:socker:Operation not permitted

You don't have sufficient privileges to capture packets. I presume
this is Linux? Then you need to run Bro as root (or apply a kernel
patch: No Title)

Robin