[Oisf-users] (source-nfq.c:246) <Error> (NFQInitThread) -- [ERRCODE: SC_ERR_NFQ_UNBIND(70)] - nfq_unbind_pf() for AF_INET failed

Victor Julien victor at inliniac.net
Mon Sep 27 06:42:36 UTC 2010


I think the problem is that the ip_queue module is loaded. In my
experience ip_queue and nf_queue applications don't mix. So try
unloading ip_queue with the command "rmmod ip_queue" and try starting
Suricata again.

Cheers,
Victor

zeojex wrote:
> Hi,
> 
> I prefer to post this new message for my problem 
> because i begin to speak in an existing post (from Martin).
> 
> So there is the command i launch: 
> suricata -c /etc/suricata/suricata.yaml -q 0
> 
> And the error i get at the end of process :
> [8725] 26/9/2010 -- 14:07:02 - (source-nfq.c:246) 
> <Error> (NFQInitThread) -- [ERRCODE: SC_ERR_NFQ_UNBIND(70)]
>  - nfq_unbind_pf() for AF_INET failed
> 
> "lsmod" result :
> Module                  Size  Used by
> nfnetlink_queue         7620  0
> nfnetlink               3928  1 nfnetlink_queue
> tcp_diag                1472  0
> inet_diag               8392  1 tcp_diag
> radeon                118720  2
> drm                    65320  3 radeon
> xt_multiport            2816  0
> battery                10180  0
> iptable_nat             4680  0
> iptable_mangle          2688  0
> nf_nat_irc              2080  0
> nf_conntrack_irc        5124  1 nf_nat_irc
> nf_nat_ftp              2528  0
> nf_nat                 15576  3 iptable_nat
> ,nf_nat_irc,nf_nat_ftp
> nf_conntrack_ftp        6852  1 nf_nat_ftp
> ip_queue                6608  0
> ppdev                   6468  0
> lp                      8164  0
> ipv6                  235396  49
> ipt_LOG                 5028  0
> xt_limit                2180  0
> xt_tcpudp               2816  0
> nf_conntrack_ipv4      12268  3 iptable_nat,nf_nat
> xt_state                2016  0
> nf_conntrack           55540  8
> iptable_nat,nf_nat_irc,nf_conntrack_irc,nf_nat_ftp
> ,nf_nat,nf_conntrack_ftp,nf_conntrack_ipv4,xt_state
> ipt_REJECT              2784  0
> iptable_filter          2624  0
> ip_tables              10160  3 iptable_nat
> ,iptable_mangle,iptable_filter
> x_tables               13284  8
> xt_multiport,iptable_nat,ipt_LOG,xt_limit,xt_tcpudp
> ,xt_state,ipt_REJECT,ip_tables
> decnet                 56780  0 [permanent]
> nls_utf8                1760  1
> nls_cp437               5568  1
> vfat                    9152  1
> fat                    40864  1 vfat
> nls_base                6820  4 nls_utf8,nls_cp437
> ,vfat,fat
> dm_snapshot            14340  0
> dm_mirror              15136  0
> dm_log                  8452  1 dm_mirror
> dm_mod                 46216  3 dm_snapshot,dm_mirror
> ,dm_log
> sbp2                   18572  0
> loop                   12748  0
> parport_pc             22500  1
> parport                30988  3 ppdev,lp,parport_pc
> snd_intel8x0m          12492  0
> snd_seq_dummy           2660  0
> pcspkr                  2432  0
> snd_intel8x0           26268  0
> snd_ac97_codec         88452  2 snd_intel8x0m,snd_intel8x0
> snd_seq_oss            24992  0
> ac97_bus                1728  1 snd_ac97_codec
> snd_pcm_oss            32800  0
> snd_mixer_oss          12320  1 snd_pcm_oss
> snd_seq_midi            5728  0
> snd_rawmidi            18496  1 snd_seq_midi
> snd_seq_midi_event      6432  2 snd_seq_oss
> ,snd_seq_midi
> snd_seq                41456  6
> snd_seq_dummy,snd_seq_oss,snd_seq_midi
> ,snd_seq_midi_event
> snd_seq_device          6380  5
> snd_seq_dummy,snd_seq_oss,snd_seq_midi,snd_rawmidi
> ,snd_seq
> snd_pcm                62660  4
> snd_intel8x0m,snd_intel8x0,snd_ac97_codec,snd_pcm_oss
> snd_timer              17800  2 snd_seq,snd_pcm
> snd                    45636  11
> snd_intel8x0m,snd_intel8x0,snd_ac97_codec,snd_seq_oss
> ,snd_pcm_oss,snd_mixer_oss,snd_rawmidi,snd_seq
> ,snd_seq_device,snd_pcm,snd_timer
> soundcore               6368  1 snd
> snd_page_alloc          7816  3 snd_intel8x0m
> ,snd_intel8x0,snd_pcm
> button                  6096  0
> i2c_sis96x              4132  0
> i2c_core               19828  1 i2c_sis96x
> shpchp                 25528  0
> pci_hotplug            23460  1 shpchp
> sis_agp                 6752  1
> agpgart                28808  2 drm,sis_agp
> evdev                   8000  3
> ext3                  105576  5
> jbd                    39476  1 ext3
> mbcache                 7108  1 ext3
> ide_cd_mod             27684  0
> cdrom                  30176  1 ide_cd_mod
> ide_disk               10496  9
> ata_generic             4676  0
> libata                140448  1 ata_generic
> scsi_mod              129548  2 sbp2,libata
> dock                    8304  1 libata
> usbhid                 35872  0
> hid                    33184  1 usbhid
> ff_memless              4392  1 usbhid
> 8139cp                 16800  0
> sis5513                 6788  0 [permanent]
> floppy                 47844  0
> 8139too                20384  0
> mii                     4896  2 8139cp,8139too
> ehci_hcd               28428  0
> ohci_hcd               18500  0
> usbcore               118224  4 usbhid,ehci_hcd,ohci_hcd
> ide_pci_generic         3908  0 [permanent]
> ide_core               96168  4 ide_cd_mod,ide_disk,sis5513,ide_pci_generic
> ohci1394               24976  0
> ieee1394               75832  2 sbp2,ohci1394
> thermal                15228  0
> processor              32576  1 thermal
> fan                     4196  0
> thermal_sys            10856  3 thermal,processor,fan
> 
> 
> "cat /proc/net/netfilter/nf_queue" result :
> 
>  0 NONE
>  1 NONE
>  2 ip_queue
>  3 NONE
>  4 NONE
>  5 NONE
>  6 NONE
>  7 NONE
>  8 NONE
>  9 NONE
> 10 NONE
> 11 NONE
> 12 NONE
> 13 NONE
> 14 NONE
> 15 NONE
> 16 NONE
> 17 NONE
> 18 NONE
> 19 NONE
> 20 NONE
> 21 NONE
> 22 NONE
> 23 NONE
> 24 NONE
> 25 NONE
> 26 NONE
> 27 NONE
> 28 NONE
> 29 NONE
> 30 NONE
> 31 NONE
> 32 NONE
> 33 NONE
> 
> Can you help me ??
> 
> _______________________________________________
> Oisf-users mailing list
> Oisf-users at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users


-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------




More information about the Oisf-users mailing list