[Oisf-users] Looks like we have failed to retrieve the slot for DECODE TM

Victor Julien victor at inliniac.net
Wed Jun 20 15:24:36 UTC 2012


Was a bug too. If pcap device was missing from config the number of
threads was initialized to -1, leading to no threads created. Fixed in
the master.

On 06/18/2012 10:37 AM, Anoop Saldanha wrote:
> Yes, this behaviour's definitely new.
> 
> On Mon, Jun 18, 2012 at 1:28 PM, Michel SABORDE
> <michel.saborde at gmail.com> wrote:
>> Thanks for your answers.
>>
>> I change the interface in the "pcap:" section of the suricata.yaml file but
>> does it mean that everytime i want to run suricata on another interface i
>> have to change the interface in the config file ?
>> I don't remember this behaviour in the previous versions of suricata.
>>
>> Michel
>> 2012/6/16 Peter Manev <petermanev at gmail.com>
>>>
>>> I think it is probably a good idea to check that during start up and warn
>>> properly.
>>>
>>>
>>> On Sat, Jun 16, 2012 at 4:52 AM, Anoop Saldanha <anoopsaldanha at gmail.com>
>>> wrote:
>>>>
>>>> On Thu, Jun 14, 2012 at 6:11 PM, Victor Julien <victor at inliniac.net>
>>>> wrote:
>>>>> On 06/13/2012 05:05 PM, Michel SABORDE wrote:
>>>>>> Hello everyone,
>>>>>>
>>>>>> I just tried the last git version of suricata (downloaded 10minutes
>>>>>> ago)
>>>>>> and i can't get it work on another interface than eth0.
>>>>>> Here is what i have always used to start suricata :
>>>>>> suricata -i eth1 -c /etc/suricata/suricata.yaml -S
>>>>>> /etc/suricata/rules/my_rule.rules
>>>>>>
>>>>>> Now i get the following error :
>>>>>> (flow-timeout.c:692) <Error> (FlowForceReassemblySetup) -- [ERRCODE:
>>>>>> SC_ERR_TM_MODULES_ERROR(136)] - Looks like we have failed to retrieve
>>>>>> the slot for DECODE TM
>>>>>
>>>>> What runmode did you specify in your yaml?
>>>>>
>>>>> --
>>>>> ---------------------------------------------
>>>>> Victor Julien
>>>>> http://www.inliniac.net/
>>>>> PGP: http://www.inliniac.net/victorjulien.asc
>>>>> ---------------------------------------------
>>>>>
>>>>> _______________________________________________
>>>>> Oisf-users mailing list
>>>>> Oisf-users at openinfosecfoundation.org
>>>>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>>>
>>>> This can be reproduced from pcap livemode, when you specify an
>>>> interface on the command line that doesn't match the iface specified
>>>> in the conf file.
>>>>
>>>> --
>>>> Anoop Saldanha
>>>> _______________________________________________
>>>> Oisf-users mailing list
>>>> Oisf-users at openinfosecfoundation.org
>>>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>>
>>>
>>>
>>>
>>> --
>>> Regards,
>>> Peter Manev
>>>
>>>
>>> _______________________________________________
>>> Oisf-users mailing list
>>> Oisf-users at openinfosecfoundation.org
>>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>>
>>
> 
> 
> 


-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------




More information about the Oisf-users mailing list