[Oisf-users] Looks like we have failed to retrieve the slot for DECODE TM

[Anoop Saldanha]

Yes, this behaviour's definitely new.

On Mon, Jun 18, 2012 at 1:28 PM, Michel SABORDE
<michel.saborde at gmail.com> wrote:
> Thanks for your answers.
>
> I change the interface in the "pcap:" section of the suricata.yaml file but
> does it mean that everytime i want to run suricata on another interface i
> have to change the interface in the config file ?
> I don't remember this behaviour in the previous versions of suricata.
>
> Michel
> 2012/6/16 Peter Manev <petermanev at gmail.com>
>>
>> I think it is probably a good idea to check that during start up and warn
>> properly.
>>
>>
>> On Sat, Jun 16, 2012 at 4:52 AM, Anoop Saldanha <anoopsaldanha at gmail.com>
>> wrote:
>>>
>>> On Thu, Jun 14, 2012 at 6:11 PM, Victor Julien <victor at inliniac.net>
>>> wrote:
>>> > On 06/13/2012 05:05 PM, Michel SABORDE wrote:
>>> >> Hello everyone,
>>> >>
>>> >> I just tried the last git version of suricata (downloaded 10minutes
>>> >> ago)
>>> >> and i can't get it work on another interface than eth0.
>>> >> Here is what i have always used to start suricata :
>>> >> suricata -i eth1 -c /etc/suricata/suricata.yaml -S
>>> >> /etc/suricata/rules/my_rule.rules
>>> >>
>>> >> Now i get the following error :
>>> >> (flow-timeout.c:692) <Error> (FlowForceReassemblySetup) -- [ERRCODE:
>>> >> SC_ERR_TM_MODULES_ERROR(136)] - Looks like we have failed to retrieve
>>> >> the slot for DECODE TM
>>> >
>>> > What runmode did you specify in your yaml?
>>> >
>>> > --
>>> > ---------------------------------------------
>>> > Victor Julien
>>> > http://www.inliniac.net/
>>> > PGP: http://www.inliniac.net/victorjulien.asc
>>> > ---------------------------------------------
>>> >
>>> > _______________________________________________
>>> > Oisf-users mailing list
>>> > Oisf-users at openinfosecfoundation.org
>>> > http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>>
>>> This can be reproduced from pcap livemode, when you specify an
>>> interface on the command line that doesn't match the iface specified
>>> in the conf file.
>>>
>>> --
>>> Anoop Saldanha
>>> _______________________________________________
>>> Oisf-users mailing list
>>> Oisf-users at openinfosecfoundation.org
>>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>
>>
>>
>>
>> --
>> Regards,
>> Peter Manev
>>
>>
>> _______________________________________________
>> Oisf-users mailing list
>> Oisf-users at openinfosecfoundation.org
>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>
>



-- 
Anoop Saldanha