[Oisf-users] What does mean this error?

[C. L. Martinez]

On Sun, Apr 09, 2017 at 08:24:42AM +0200, Peter Manev wrote:
> 
> 
> > On 9 Apr 2017, at 07:37, C. L. Martinez <carlopmart at gmail.com> wrote:
> > 
> >> On Sat, Apr 08, 2017 at 10:48:24PM +0200, Andreas Herz wrote:
> >>> On 05/04/17 at 10:16, C. L. Martinez wrote:
> >>> Hi all,
> >>> 
> >>> Another message error using Suricata 3.2.1 under FreeBSD 11:
> >>> 
> >>> 5/4/2017 -- 10:13:17 - <Warning> - [ERRCODE: SC_ERR_INVALID_VALUE(130)] - Name of device should not be null
> >>> 
> >>> What does it mean? My suricata startup options are:
> >>> 
> >>> /usr/local/bin/suricata -F /etc/suricata/bpf.conf -D -i vtnet1 --pidfile /var/run/suricata.pid -c /etc/suricata/suricata.yaml
> >> 
> >> Does this happen as well if you skip the "-i vtnet" part? It's also
> >> necessary to define it if you don't want to use the section of the
> >> config.
> > 
> > If I omit "-i vtnet1" from command line, suricata doesn't start ...
> 
> If you use the same start line but comment out in your pcap: section - 
> #-interface: default
> Would the err still be there ?
> 

Yes, same error:

9/4/2017 -- 07:16:20 - <Notice> - This is Suricata version 3.2.1 RELEASE
9/4/2017 -- 07:16:25 - <Warning> - [ERRCODE: SC_ERR_INVALID_VALUE(130)] - Name of device should not be null

cat /etc/suricata/suricata.yaml

##
## Step 4: configure common capture settings
##
## See "Advanced Capture Options" below for more options, including NETMAP
## and PF_RING.
##

pcap:
  - interface: vtnet1
    checksum-checks: no
    snaplen: 1518
  #- interface: default

-- 
Greetings,
C. L. Martinez