11

I always end up with this error message, "tcpdump: ioctl(SIOCIFCREATE): Operation not permitted" Any ideas to what I am doing wrong. I am running this on OS X Yosemite.

ccramer
  • 121
  • 1
  • 1
  • 4
  • 3
    You need to include code so we know what is causing the error, check here for some advice: http://stackoverflow.com/help/mcve – Evan Frisch Dec 03 '15 at 20:24

2 Answers2

21

Any ideas to what I am doing wrong

Not running tcpdump as root. On Yosemite and later, tcpdump captures on the "any" device by default, and setting up an "any" device requires root privileges - not just the ability to open the BPF devices.

2

Run sudo tcpdump.

You have to run it as a root because of macos security.

simPod
  • 11,498
  • 17
  • 86
  • 139