<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=koi8-r">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:634607722;
mso-list-type:hybrid;
mso-list-template-ids:-1668921206 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1
{mso-list-id:2085954981;
mso-list-type:hybrid;
mso-list-template-ids:1110872272 2060455856 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.75in;
text-indent:-.25in;
font-family:Symbol;
mso-fareast-font-family:Calibri;
mso-bidi-font-family:Calibri;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.25in;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.75in;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.25in;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.75in;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.25in;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.75in;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.25in;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.75in;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is there an update/fix for the above referenced support number? When starting Suricata, I get the following message which I think is causing Suricata to not fully load:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:red">(util-ioctl.c:106) <Warning> (GetIfaceMTU) -- [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get MTU via ioctl for '\Device\NPF_{5DB0B6BB-………E25}': Invalid argument (22)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:red"><o:p> </o:p></span></p>
<p class="MsoNormal">Troubleshooting steps I have taken:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraphCxSpFirst" style="margin-left:.25in;mso-add-space:auto;mso-list:l1 level1 lfo1">
<span style="font-size:12.0pt;line-height:106%">Used this site to reconcile my util-ioctl.c file against the one provided on the website – resulted in no change.<o:p></o:p></span></li></ul>
<p class="MsoListParagraphCxSpMiddle" style="margin-left:.75in;mso-add-space:auto">
<span style="font-size:12.0pt;line-height:106%"><a href="https://github.com/OISF/suricata/commit/8ac48872a5a005bf97bb90cdc0ecf1fe620448a2">https://github.com/OISF/suricata/commit/8ac48872a5a005bf97bb90cdc0ecf1fe620448a2</a><o:p></o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraphCxSpMiddle" style="margin-left:.25in;mso-add-space:auto;mso-list:l1 level1 lfo1">
<span style="font-size:12.0pt;line-height:106%">Created a new util-ioctl.c file using the example from the site below – resulted in no change.<o:p></o:p></span></li></ul>
<p class="MsoListParagraphCxSpMiddle" style="text-indent:.25in"><span style="font-size:12.0pt;line-height:106%"><a href="https://fossies.org/linux/suricata/src/util-ioctl.c">https://fossies.org/linux/suricata/src/util-ioctl.c</a><o:p></o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraphCxSpMiddle" style="margin-left:.25in;mso-add-space:auto;mso-list:l1 level1 lfo1">
<span style="font-size:12.0pt;line-height:106%">Followed instructions on this site to change to single \’s in directory path for magic.mgc file in yaml.<o:p></o:p></span></li></ul>
<p class="MsoListParagraphCxSpLast" style="margin-left:.75in;mso-add-space:auto">
<span style="font-size:12.0pt;line-height:106%"><a href="https://redmine.openinfosecfoundation.org/issues/1148">https://redmine.openinfosecfoundation.org/issues/1148</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">I have been able to find on the Internet examples of other users getting the same error message, but have not been able to find a solution.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">System details:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"> Server – Windows 2016 Server<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"> Suricata version - 4.1.0-dev (rev 787473ec)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">This is a fresh install of Suricata on the server (not an upgrade). I have attached the current .yaml file and util-ioctl.c file, as well as a screen shot of the console when I start Suricata.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Please let me know if there is any other information I can provide to help me get Suricata working.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Thank you!<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-right:9.0pt;text-autospace:none"><b><span style="font-size:12.5pt;font-family:"Arial",sans-serif;color:#0065BD;mso-fareast-language:KO">Jeff Suchomel</span></b><span style="mso-fareast-language:KO"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-right:9.0pt;text-autospace:none"><span style="font-size:12.5pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:KO">Network Security Analyst</span><span style="mso-fareast-language:KO"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-right:9.0pt;text-autospace:none"><b><span style="font-size:12.5pt;font-family:"Arial",sans-serif;color:#0065BD;mso-fareast-language:KO">HealthMarkets, Inc.
</span></b><span style="mso-fareast-language:KO"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-right:9.0pt;text-autospace:none"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#0065BD;mso-fareast-language:KO"> </span><span style="mso-fareast-language:KO"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-right:9.0pt;text-autospace:none"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#0065BD;mso-fareast-language:KO">9151 Boulevard 26 ” North Richland Hills, TX 76180</span><span style="mso-fareast-language:KO"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-right:9.0pt;text-autospace:none"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#0065BD;mso-fareast-language:KO">P (817) 255-3263
</span><span style="mso-fareast-language:KO"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-right:9.0pt;text-autospace:none"><span style="font-size:9.5pt;font-family:"Times New Roman",serif;color:#0065BD;mso-fareast-language:KO"><a href="mailto:jeff.suchomel@hmkts.com"><span style="color:#0563C1">jeff.suchomel@hmkts.com</span></a></span><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#0065BD;mso-fareast-language:KO">
” <a href="http://www.healthmarketsinc.com/"><span style="font-family:"Times New Roman",serif;color:blue">www.HealthMarketsInc.com</span></a></span><span style="mso-fareast-language:KO"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-right:9.0pt;text-autospace:none"><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#828282;mso-fareast-language:KO"> </span><span style="mso-fareast-language:KO"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#4D4D4D;mso-fareast-language:KO">Confidentiality Notice:
</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#4D4D4D;mso-fareast-language:KO">This email message may contain confidential or proprietary information. Any unauthorized review, use, disclosure or distribution is prohibited. If
you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. HealthMarkets, Inc. is a holding company that includes insurance subsidiaries The Chesapeake Life Insurance Company<sup>®</sup> and
Mid-West National Life Insurance Company of Tennessee<sup>SM</sup>, and a subsidiary distribution company HealthMarkets Insurance Agency, the d/b/a of Insphere Insurance Solutions<sup>®</sup>.</span><span style="mso-fareast-language:KO"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>