Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to run tcpdum on Solaris 10 as root user.
I always get unknown device - even though I am using the name provided by

ifconfig -a

How can I find out the right device name?

share|improve this question
Can you post the results you are getting from the ifconfig -a command and the exact tcpdump command you are using? – MaQleod Mar 9 '11 at 6:39
up vote 1 down vote accepted

Use snoop in Solaris, instead of tcpdump. The interfaces that are plumbed can be listed with ifconfig -a. The unplumbed interfaces should be listed by dmesg.

share|improve this answer

I have a solaris box here, but no root access or tcpdump to test. However on my Linux box, i get the interface name from ifconfig which returns something like.

$ ifconfig -a

eth2    Link encap:Ethernet  HWaddr blah

lo      Link enca:Local loopback

Then feeding this into tcpdump gives:-

$ tcpdump -i eth2
verbose output suppressed
listening on eth2, link-type EN10MB (Ethernet), capture size 96 bytes    

What's your actual output from ifconfig -a?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.