Since updating to 3.3.0 (maybe sooner) I cannot capture packets through libpcap with tcpdump or wireshark. I get this error: tcpdump: Can't open netlink socket 93:Protocol not supported I applied the linked patch from OpenSUSE and it is working now. Please apply the patch to libpcap-1.2.1. Reproducible: Always Steps to Reproduce: 1. Install latest kernel. 2. Install tcpdump. 3. Run tcpdump. Actual Results: tcpdump: Can't open netlink socket 93:Protocol not supported Expected Results: Packet capture.
Created attachment 307835 [details, diff] libpcap-1.2.1-netfilter-dont-fail-on-EPROTONOSUPPORT.patch Attach patch in case link goes away.
I can confirm the bug and the fix. This report has been open for over a month...
Friday March 30, 2012/June 10, 2012. mcr@sandelman.ca Summary for 1.3.0 libpcap release ... Linux: Don't fail if netfilter isn't enabled in the kernel. ...