[Oisf-users] (source-nfq.c:246) & amp; lt; Error& amp; gt; (NFQInitThread) -- [ERRCODE: SC_ERR_NFQ_UNBIND(70)] - nfq_unbind_pf() for AF_INET failed

harini harini.gopalakrishnan at lntinfotech.com
Fri Oct 29 06:12:10 UTC 2010


zeojex <zeojex at ...> writes:

> 
> Victor Julien <victor at ...> writes:
> 
> > 
> > 
> > You should probably add nfnetlink_queue.
> > 
> 
> Ok thx ! I no have error !
> But since...suricata doesn't detect anything, logs are empty.
> I put this iptables rules :
> iptables -A INPUT -p icmp -j NFQUEUE
> iptables -A FORWARD -p icmp -j NFQUEUE
> iptables -A OUTPUT -p icmp -j NFQUEUE
> 
> Where can i go to look in the queue and accept/drop/reject the packets ?
> And do you know if there is a documentation concerning suricata inline mode ?
> It became a little difficult for me...
> 
> ^^
> 

Hi All,
  while running suricata 1.0.0 in inline mode i get this error 
NFNETLINK answers: Invalid argument
[16542] 29/10/2010 -- 17:02:15 - (source-nfq.c:246) <Error> (NFQInitThread) --
[ERRCODE: SC_ERR_NFQ_UNBIND(70)] - nfq_unbind_pf() for AF_INET failed

As u have said in the previous posts i have rmmod ip_queue and have added
relevant modules as needed 
after doing lsmod -it gives the following modules
iptable_nat             9669  0 
nf_nat_irc              6209  0 
nf_conntrack_irc        9177  1 nf_nat_irc
nf_nat_ftp              6721  0 
nf_conntrack_ftp       10977  1 nf_nat_ftp
iptable_mangle          6337  0 
nf_conntrack_netlink    25793  0 
nf_nat                 18669  4
iptable_nat,nf_nat_irc,nf_nat_ftp,nf_conntrack_netlink
nfnetlink_queue        13057  0 
nf_conntrack_ipv4      11717  5 iptable_nat
ipt_REJECT              7617  2 
iptable_filter          6465  1 
ip_tables              14213  3 iptable_nat,iptable_mangle,iptable_filter
nf_conntrack_ipv6      18769  3 
xt_state                6081  6 
nf_conntrack           51977  10
nfnetlink               8281  6
xt_tcpudp               6977  10 
ip6t_ipv6header         6209  2 
ip6t_REJECT             8257  2 
ip6table_filter         6337  1 
ip6_tables             15109  2 ip6t_ipv6header,ip6table_filter
x_tables               14277  8
cpufreq_ondemand       10317  2 
acpi_cpufreq           12365  0 
loop                   16581  0 
dm_mirror              21697  0 
dm_multipath           18249  0 
dm_mod                 46465  2 dm_mirror,dm_multipath
ipv6                  245989  16 nf_conntrack_ipv6,ip6t_REJECT
snd_hda_intel         274657  3 
snd_seq_dummy           6725  0 
snd_seq_oss            29889  0 
snd_seq_midi_event      9793  1 snd_seq_oss
snd_seq                44849  5 snd_seq_dummy,snd_seq_oss,snd_seq_midi_event
snd_seq_device         10061  3 snd_seq_dummy,snd_seq_oss,snd_seq
snd_pcm_oss            37569  0 
snd_mixer_oss          16705  1 snd_pcm_oss
snd_pcm                63685  2 snd_hda_intel,snd_pcm_oss
snd_timer              20549  2 snd_seq,snd_pcm
snd_page_alloc         11337  2 snd_hda_intel,snd_pcm


The kernel i am using is  2.6.23.1-42.fc8
 kindly help me in solving the following problem 









More information about the Oisf-users mailing list