[Oisf-users] Looks like we have failed to retrieve the slot for DECODE TM

Michel SABORDE michel.saborde at gmail.com
Mon Jun 18 08:58:44 UTC 2012


Well, thank you for your help :)
Everything work fine now.

Michel
2012/6/18 Anoop Saldanha <anoopsaldanha at gmail.com>

> Yes, this behaviour's definitely new.
>
> On Mon, Jun 18, 2012 at 1:28 PM, Michel SABORDE
> <michel.saborde at gmail.com> wrote:
> > Thanks for your answers.
> >
> > I change the interface in the "pcap:" section of the suricata.yaml file
> but
> > does it mean that everytime i want to run suricata on another interface i
> > have to change the interface in the config file ?
> > I don't remember this behaviour in the previous versions of suricata.
> >
> > Michel
> > 2012/6/16 Peter Manev <petermanev at gmail.com>
> >>
> >> I think it is probably a good idea to check that during start up and
> warn
> >> properly.
> >>
> >>
> >> On Sat, Jun 16, 2012 at 4:52 AM, Anoop Saldanha <
> anoopsaldanha at gmail.com>
> >> wrote:
> >>>
> >>> On Thu, Jun 14, 2012 at 6:11 PM, Victor Julien <victor at inliniac.net>
> >>> wrote:
> >>> > On 06/13/2012 05:05 PM, Michel SABORDE wrote:
> >>> >> Hello everyone,
> >>> >>
> >>> >> I just tried the last git version of suricata (downloaded 10minutes
> >>> >> ago)
> >>> >> and i can't get it work on another interface than eth0.
> >>> >> Here is what i have always used to start suricata :
> >>> >> suricata -i eth1 -c /etc/suricata/suricata.yaml -S
> >>> >> /etc/suricata/rules/my_rule.rules
> >>> >>
> >>> >> Now i get the following error :
> >>> >> (flow-timeout.c:692) <Error> (FlowForceReassemblySetup) -- [ERRCODE:
> >>> >> SC_ERR_TM_MODULES_ERROR(136)] - Looks like we have failed to
> retrieve
> >>> >> the slot for DECODE TM
> >>> >
> >>> > What runmode did you specify in your yaml?
> >>> >
> >>> > --
> >>> > ---------------------------------------------
> >>> > Victor Julien
> >>> > http://www.inliniac.net/
> >>> > PGP: http://www.inliniac.net/victorjulien.asc
> >>> > ---------------------------------------------
> >>> >
> >>> > _______________________________________________
> >>> > Oisf-users mailing list
> >>> > Oisf-users at openinfosecfoundation.org
> >>> > http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >>>
> >>> This can be reproduced from pcap livemode, when you specify an
> >>> interface on the command line that doesn't match the iface specified
> >>> in the conf file.
> >>>
> >>> --
> >>> Anoop Saldanha
> >>> _______________________________________________
> >>> Oisf-users mailing list
> >>> Oisf-users at openinfosecfoundation.org
> >>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >>
> >>
> >>
> >>
> >> --
> >> Regards,
> >> Peter Manev
> >>
> >>
> >> _______________________________________________
> >> Oisf-users mailing list
> >> Oisf-users at openinfosecfoundation.org
> >> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >>
> >
>
>
>
> --
> Anoop Saldanha
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20120618/84d1e25d/attachment-0002.html>


More information about the Oisf-users mailing list