tcpdump requires root to be executed (it sets the network interface to promiscous mode), so it would be nicer if it would be in /usr/sbin. Here are the diffs for the ebuilds: hannes@neptun ~ $ diff -u /usr/portage/net-analyzer/tcpdump/tcpdump-3.6.2-r1.ebuild /home/portage/net-analyzer/tcpdump/tcpdump-3.6.2-r1.ebuild --- /usr/portage/net-analyzer/tcpdump/tcpdump-3.6.2-r1.ebuild Wed Aug 14 14:20:51 2002 +++ /home/portage/net-analyzer/tcpdump/tcpdump-3.6.2-r1.ebuild Thu Aug 15 14:30:58 2002 @@ -35,7 +35,7 @@ src_install() { into /usr - dobin tcpdump + dosbin tcpdump doman tcpdump.1 dodoc README FILES VERSION CHANGES } hannes@neptun ~ $ diff -u /usr/portage/net-analyzer/tcpdump/tcpdump-3.7.1.ebuild /home/portage/net-analyzer/tcpdump/tcpdump-3.7.1.ebuild --- /usr/portage/net-analyzer/tcpdump/tcpdump-3.7.1.ebuild Wed Aug 14 14:20:51 2002 +++ /home/portage/net-analyzer/tcpdump/tcpdump-3.7.1.ebuild Thu Aug 15 14:31:05 2002 @@ -28,7 +28,7 @@ src_install() { into /usr - dobin tcpdump + dosbin tcpdump doman tcpdump.1 dodoc *.awk dodoc README FILES VERSION CHANGES
Fixed, thanks for catching this.
That's right if you want to run tcpdump for current flow on interfaces, but not when replaying (-r) pcap files.