<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12px"><div><span>Coop - u da man!</span></div><div style="color: rgb(0, 0, 0); font-size: 12px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 12px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><span>All Warnings/Errors gone!!<br></span></div><div style="color: rgb(0, 0, 0); font-size: 12px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 12px; font-family: HelveticaNeue,Helvetica
Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><span>Thanks so much for helping out a newbie :-)<br></span></div> <div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 12px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> On Saturday, September 20, 2014 8:29 AM, Cooper F. Nelson <cnelson@ucsd.edu> wrote:<br> </font> </div> <br><br> <div class="y_msg_container">-----BEGIN PGP SIGNED MESSAGE-----<br clear="none">Hash: SHA1<br clear="none"><br clear="none">If you have libjansson and the associated development libraries on your<br clear="none">system it should be enabled by default. So, make sure those are<br
clear="none">installed before you build suri.<br clear="none"><br clear="none">Re: GRO/LRO, you want to disable all offloading features on your nic.<br clear="none"><br clear="none">See this guide for details on disabling them:<br clear="none"><br clear="none">> <a shape="rect" href="http://pevma.blogspot.com/2014/03/suricata-prepearing-10gbps-network.html" target="_blank">http://pevma.blogspot.com/2014/03/suricata-prepearing-10gbps-network.html</a><br clear="none"><br clear="none">- -Coop<br clear="none"><div class="yqt1870358336" id="yqtfd10962"><br clear="none">On 9/20/2014 7:14 AM, John Powell wrote:<br clear="none">> Hi,<br clear="none">> <br clear="none">> I blew away my suricata config, copied and reconfigured the default<br clear="none">> config from the source.<br clear="none">> <br clear="none">> I had followed one post that told me to add the rules to the<br clear="none">> suricata.yaml file which caused no end of
grief.<br clear="none">> <br clear="none">> I now get these warnings:<br clear="none">> <br clear="none">> 20/9/2014 -- 08:04:21 - <Warning> - [ERRCODE: SC_ERR_NOT_SUPPORTED(225)]<br clear="none">> - Eve-log support not compiled in. Reconfigure/recompile with libjansson<br clear="none">> and its development files installed to add eve-log support.<br clear="none">> 20/9/2014 -- 08:04:21 - <Warning> - [ERRCODE: SC_ERR_PCAP_CREATE(21)] -<br clear="none">> Using Pcap capture with GRO or LRO activated can lead to capture problems.<br clear="none">> <br clear="none">> I could not find any instructions on compiling in eve-log support to<br clear="none">> suricata. Any hints would be great!<br clear="none">> <br clear="none">> What do I do about the PCAP error? is there another way to capture?<br clear="none">> <br clear="none">> Thanx,<br clear="none">> <br clear="none">> John</div><br
clear="none">> <br clear="none"><br clear="none"><br clear="none"><br clear="none">- -- <br clear="none">Cooper Nelson<br clear="none">Network Security Analyst<br clear="none">UCSD ACT Security Team<br clear="none"><a shape="rect" ymailto="mailto:cnelson@ucsd.edu" href="mailto:cnelson@ucsd.edu">cnelson@ucsd.edu</a> x41042<br clear="none">-----BEGIN PGP SIGNATURE-----<br clear="none">Version: GnuPG v2.0.17 (MingW32)<br clear="none"><br clear="none">iQEcBAEBAgAGBQJUHY82AAoJEKIFRYQsa8FWCqwH/2JjV7eoQMmyHfIZLBDgj8pL<br clear="none">BShRj/JU1u5cG0ywfMuopm6QoSZx/v6vl2WIL7DgRkC4/GcSHETvUJfSS2QOafpp<br clear="none">m6LHg6JfY8wU6SH3n67SgYBjZFoWgNI3qh3F2Kv4cEXkQZfsKg/bTlyPhSS06DZd<br clear="none">mHWHbtazd6jZe+fmrme0JANwRxj2gqG8cBZKGce0zJZDYzsqwumAppXMKDZ4gg8P<br clear="none">dIX2r5x2/lI2zr5ZM2bce4WaYlc+fkPnP5dfM9okIml5sIKsE2LmghyRlAWdlk+g<br clear="none">ZZDPzxqC9qCZDIv1o8HR4zIFY8S3JIPXd1ANcz5NWlO/7N706ytTWPO08IMbZrA=<br clear="none">=QP2k<br
clear="none">-----END PGP SIGNATURE-----<div class="yqt1870358336" id="yqtfd37676"><br clear="none"></div><br><br></div> </div> </div> </div> </div></body></html>