ngrep fails with this (dtruss output): Espy app # dtruss ngrep -d lo0 -W byline tcp port 3000 <snip> open_nocancel("/etc/sysinfo.conf\0", 0x0, 0x1B6) = -1 Err#2 writev_nocancel(0x2, 0x7FFF5FBFE960, 0x4) = 78 0 sigaction(0x2, 0x7FFF5FBFF160, 0x7FFF5FBFF190) = 0 0 sigaction(0x6, 0x7FFF5FBFF160, 0x7FFF5FBFF190) = 0 0 sigaction(0x3, 0x7FFF5FBFF160, 0x7FFF5FBFF190) = 0 0 sigaction(0xD, 0x7FFF5FBFF160, 0x7FFF5FBFF190) = 0 0 sigaction(0x1C, 0x7FFF5FBFF160, 0x7FFF5FBFF190) = 0 0 madvise(0x100300000, 0x80000, 0x9) = 0 0 close(0x3) = 0 0 darwinports has ngrep, so it's possible to run on darwin. It'd be great to have this tool working. Reproducible: Always
Need to figure out how to "trick" it or something. Not sure though, ngrep doesn't even install the file itself. And macports uses the same configure options as we do...
the sources don't reference this file, neither does libpcap do.