SUID showeq - 5.0.0.3

[kjb]

I run showeq on my firewall box. I used to run the 4's SUID and point it at my main box on the inside - I sometimes two box and want to always watch that one. Now for some reason when I try and point 5.0.0.3 to eth1 - the inside adapter, I get a message that I'm not running as root. Running on eth0, it picks the last one to zone, and that's a pain in the ass. I know I'm missing something, but not sure what. I've not seen this mentioned since 5.0.0.3 came out, so either I'm not searching right, or nobody else runs it like I do?

[Cryonic]

Try doing:

showeq -i eth1

The issue may be that it is fully dropping root after setting up pcap to capture off the eth0 device and so doesn't keep enough permissions to make the change to a different device.

[kjb]

That does the trick.