<html><body><div style="color:#000; background-color:#fff; font-family:tahoma, new york, times, serif;font-size:12pt"><div style="font-family: tahoma, 'new york', times, serif; font-size: 12pt;">Hello @list,</div><div style="font-family: tahoma, 'new york', times, serif; font-size: 12pt;"><br></div><div style="font-family: tahoma, 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;">I'm trying to run Suricata under OpenBSD 5.3 amd64. </div><div style="font-family: tahoma, 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><div style="font-family: 'Times New Roman'; font-size: 16px; background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;"># uname -rmsv</span></div><div style="font-family: 'Times New Roman'; font-size: 16px; background-color: transparent;"><span style="font-family: tahoma,
'new york', times, serif;">OpenBSD 5.3 GENERIC.MP#2 amd64</span></div></div><div style="font-family: tahoma, 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><br></div><div style="font-family: tahoma, 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;">I've used default config and enter this command:</div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">suricata -c /etc/suricata -d 8000</span><br></div><div style="font-family: tahoma, 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><br></div><div style="font-family: tahoma, 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;">It failed with these error messages:</div><div
style="background-color: transparent;"><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - This is Suricata version 1.4.1 RELEASE</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - CPUs/cores online: 2</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - allocated 98304 bytes of memory for the defrag hash... 4096 buckets of size 24</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - defrag memory usage: 98304 bytes, maximum: 16777216</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times,
serif;">17/4/2013 -- 00:00:07 - <Info> - AutoFP mode using default "Active Packets" flow load balancer</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - preallocated 1024 packets. Total memory 4294656</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - allocated 98304 bytes of memory for the host hash... 4096 buckets of size 24</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - preallocated 1000 hosts of size 96</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - host memory usage: 194304 bytes, maximum: 16777216</span></div><div
style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - allocated 1572864 bytes of memory for the flow hash... 65536 buckets of size 24</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - preallocated 10000 flows of size 224</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - flow memory usage: 3812864 bytes, maximum: 33554432</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Info> - IP reputation disabled</span></div><div style="background-color: transparent;"><span style="font-family: tahoma, 'new york', times, serif;">17/4/2013 -- 00:00:07 - <Error> - [ERRCODE:
SC_ERR_ACTION_ORDER(3)] - action-order, the config didn't specify all of the actions. Please, use "pass","drop","alert","reject". You have to specify all of them, without quotes and without capital letters</span></div><div style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 16px; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 16px; font-style: normal;">But I have already have action-order parameters in it:</div><div><div><span style="font-family: tahoma, 'new york', times, serif;">action-order:</span></div><div><span style="font-family: tahoma, 'new york', times, serif;"> - pass</span></div><div><span style="font-family: tahoma, 'new york', times, serif;"> - drop</span></div><div><span style="font-family: tahoma, 'new york', times, serif;"> - reject</span></div><div><span style="font-family: tahoma, 'new york', times,
serif;"> - alert</span></div></div><div style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 16px; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 16px; font-style: normal;">Any help is welcome, thanks a lot.</div><div style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 16px; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 16px; font-style: normal;">--</div><div style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 16px; font-style: normal;">Theron</div></div><div style="font-family: tahoma, 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><br></div><div style="background-color: transparent;"><div style="background-color:
transparent;"><br></div><div style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 16px; font-style: normal;"><br></div></div></div></body></html>