tcpdump: No suitable device found

tcpdump: No suitable device found

tcpdump cannot find a network interface for packet capture when no interfaces are available or accessible.

When tcpdump Produces This Error

tcpdump displays tcpdump: no suitable device found when it cannot access any network interface.

What Causes "No suitable device found" in tcpdump

The user lacks permissions to access network interfaces (run with sudo). No network interfaces are up. The system runs in a container or namespace without access to the host network.

How to Fix "No suitable device found" in tcpdump

1. List available interfaces:

   sudo tcpdump -D

2. Run tcpdump with sudo if the interface list is empty for non-root users:

   sudo tcpdump -i any

3. In containers, use --network=host to access host interfaces or capture from the host directly.