[Oisf-users] Looks like we have failed to retrieve the slot for DECODE TM

[Michel SABORDE]

Thanks for your answers.

I change the interface in the "pcap:" section of the suricata.yaml file but
does it mean that everytime i want to run suricata on another interface i
have to change the interface in the config file ?
I don't remember this behaviour in the previous versions of suricata.

Michel
2012/6/16 Peter Manev <petermanev at gmail.com>

> I think it is probably a good idea to check that during start up and warn
> properly.
>
>
> On Sat, Jun 16, 2012 at 4:52 AM, Anoop Saldanha <anoopsaldanha at gmail.com>wrote:
>
>> On Thu, Jun 14, 2012 at 6:11 PM, Victor Julien <victor at inliniac.net>
>> wrote:
>> > On 06/13/2012 05:05 PM, Michel SABORDE wrote:
>> >> Hello everyone,
>> >>
>> >> I just tried the last git version of suricata (downloaded 10minutes
>> ago)
>> >> and i can't get it work on another interface than eth0.
>> >> Here is what i have always used to start suricata :
>> >> suricata -i eth1 -c /etc/suricata/suricata.yaml -S
>> >> /etc/suricata/rules/my_rule.rules
>> >>
>> >> Now i get the following error :
>> >> (flow-timeout.c:692) <Error> (FlowForceReassemblySetup) -- [ERRCODE:
>> >> SC_ERR_TM_MODULES_ERROR(136)] - Looks like we have failed to retrieve
>> >> the slot for DECODE TM
>> >
>> > What runmode did you specify in your yaml?
>> >
>> > --
>> > ---------------------------------------------
>> > Victor Julien
>> > http://www.inliniac.net/
>> > PGP: http://www.inliniac.net/victorjulien.asc
>> > ---------------------------------------------
>> >
>> > _______________________________________________
>> > Oisf-users mailing list
>> > Oisf-users at openinfosecfoundation.org
>> > http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>
>> This can be reproduced from pcap livemode, when you specify an
>> interface on the command line that doesn't match the iface specified
>> in the conf file.
>>
>> --
>> Anoop Saldanha
>> _______________________________________________
>> Oisf-users mailing list
>> Oisf-users at openinfosecfoundation.org
>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>
>
>
>
> --
> Regards,
> Peter Manev
>
>
> _______________________________________________
> Oisf-users mailing list
> Oisf-users at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20120618/93e7c171/attachment-0002.html>