[Oisf-users] Error Message

[Eric Leblond]

Hello,

Le jeudi 09 mai 2013 à 05:20 -0500, Leonard Jacobs a écrit :
> What does the following error mean and what can cause it to alert?
> How can we keep it from happening?


If your peered interface MTU are equal this is a bug.

In this case, can you file a bug on redmine:
https://redmine.openinfosecfoundation.org/projects/suricata/issues/new

I will look into it today or tomorrow ...

BR,

>  
> 
> SC_ERR_INVALID_ACTION(142)
> 
> Sending packet failed on Socket 8: Message too long 
> 
> Unable to release packet data
> 
>  
> 
> We get it with af-packet IPS mode.
> 
>  
> 
> We suspect that it is happening enough that whatever is causing it to
> alert is stopping the flow of packets significantly; to the point that
> some applications time out.
> 
>  
> 
> Thanks.
> 
>  
> 
> Leonard
> 
>  
> 
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20130509/88b89cbb/attachment.sig>