From bb8cce59686f4ebba5aeee3073fb9322ec9ef6f9 Mon Sep 17 00:00:00 2001 From: Guy Harris Date: Wed, 9 Sep 2009 17:36:06 -0700 Subject: [PATCH] Put in a note about the Snow Leopard bug that requires that you have BPF devices open for writing in order to capture outgoing traffic. --- README.macosx | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/README.macosx b/README.macosx index cfda4b8..3dc9211 100644 --- a/README.macosx +++ b/README.macosx @@ -67,3 +67,8 @@ give the administrative users permission to read but not write the BPF devices, you can have the script change the owner to that user, the group to "admin", and the permissions to rw-r-----. Other possibilities are left as an exercise for the reader. + +(NOTE: due to a bug in Snow Leopard, if you change the permissions not +to grant write permission to everybody who should be allowed to capture +traffic, non-root users who cannot open the BPF devices for writing will +not be able to capture outgoing packets.)