From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1RgA9v-0001nd-HG for garchives@archives.gentoo.org; Thu, 29 Dec 2011 07:12:15 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D3EEA21C0C3; Thu, 29 Dec 2011 07:11:58 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id C7A7C21C039 for ; Thu, 29 Dec 2011 07:10:52 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp.gentoo.org (Postfix) with ESMTP id 5873A1B401B for ; Thu, 29 Dec 2011 07:10:52 +0000 (UTC) X-Virus-Scanned: by amavisd-new using ClamAV at gentoo.org X-Spam-Flag: NO X-Spam-Score: -3.424 X-Spam-Level: X-Spam-Status: No, score=-3.424 tagged_above=-999 required=5.5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_NUMERIC_HELO=1.164, RP_MATCHES_RCVD=-1.288, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from smtp.gentoo.org ([127.0.0.1]) by localhost (smtp.gentoo.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pfUZmCN61_ww for ; Thu, 29 Dec 2011 07:10:43 +0000 (UTC) Received: from lo.gmane.org (lo.gmane.org [80.91.229.12]) by smtp.gentoo.org (Postfix) with ESMTP id 56A301B401F for ; Thu, 29 Dec 2011 07:10:42 +0000 (UTC) Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1RgA8N-0004TF-Gm for gentoo-user@gentoo.org; Thu, 29 Dec 2011 08:10:39 +0100 Received: from 188.122.213.132 ([188.122.213.132]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 29 Dec 2011 08:10:39 +0100 Received: from lubos.kolouch by 188.122.213.132 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 29 Dec 2011 08:10:39 +0100 X-Injected-Via-Gmane: http://gmane.org/ To: gentoo-user@lists.gentoo.org From: Lubos Kolouch Subject: [gentoo-user] Re: Packet sniffing broken recently? Date: Thu, 29 Dec 2011 07:10:19 +0000 (UTC) Message-ID: References: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: 188.122.213.132 User-Agent: Pan/0.135 (Tomorrow I'll Wake Up and Scald Myself with Tea; GIT 30dc37b master) Content-Transfer-Encoding: quoted-printable X-Archives-Salt: a4da1d77-0053-4c68-8d9c-56e95f877844 X-Archives-Hash: 18d766b171b588722f45ed74ce645ccd walt, Wed, 28 Dec 2011 17:01:59 -0800: > Sometime in the last month or so (when I wasn't looking) my ~x86 and > ~amd64 machines quit working when I try to run wireshark or tcpdump, > etc, but I don't know exactly when or why. (My amd64 machine still > sniffs packets normally.) >=20 > I get this same error from any packet sniffing app: >=20 > Can't open netlink socket 93:Protocol not supported >=20 > Strace shows that this is the failing system call: >=20 > socket(PF_NETLINK, SOCK_RAW, 12) =3D -1 EPROTONOSUPPORT (Protocol not > supported) >=20 > That makes me think of some missing kernel config that may have been > added or modified in recent kernels, so I tried gentoo-sources-3.0.6 > (same as my working amd64 machine) with no joy. Same error message. >=20 > Have I missed some important gentoo bulletin about networking recently?= =20 > Anyone have working packet sniffing on ~arch? Hi, If I remember correctly, I needed to set=20 Networking support -> Networking options -> Network packet filtering=20 framework (Netfilter) -> Core Netfilter Configuration -> Netfilter connection tracking support=20 It has been a while though, so it may be another option in the netfilter config - just try it :) Lubos