[Oisf-users] Illegal operation (Suricata 2.1beta4)

Yasha Zislin coolyasha at hotmail.com
Mon Jun 1 12:42:42 UTC 2015


Will I loose any functionality with this parameter?
BTW, I realized that I have different CPUs (Intel vs AMD). Will this parameter help me?
Thanks for quick response Victor.

> Date: Mon, 1 Jun 2015 14:24:58 +0200
> From: lists at inliniac.net
> To: oisf-users at lists.openinfosecfoundation.org
> Subject: Re: [Oisf-users] Illegal operation (Suricata 2.1beta4)
> 
> On 06/01/2015 01:53 PM, Yasha Zislin wrote:
> > I've created an RPM out of the source code of Suricata 2.1beta4.
> > It works fine on a bunch of boxes except for one.
> > I get the following error what I try to start the service.
> > Suricata-Main[4177] trap invalid opcode ip:416895 sp:7fff21613e20
> > error:0 in suricata[400000+1d3000]
> > 
> > I run the following command to start:
> > suricata -c /xxx/suricata.yaml --pfring -vv
> > 
> > Running just suricata works fine.
> > I get the same error if I try to use af-packet mode.
> > 
> > This and working box have the same OS running (CentOS 6 64bit).
> > 
> > The only difference that I notice is amount of RAM and monitored NICs.
> > Non-working has an Intel card. But I've tried to start it for another
> > interface with no luck.
> 
> The rpm's should be built with --disable-gccmarch-native passed to
> configure. Otherwise they will have optimizations for the build host,
> that may not work on different hardware.
> 
> -- 
> ---------------------------------------------
> Victor Julien
> http://www.inliniac.net/
> PGP: http://www.inliniac.net/victorjulien.asc
> ---------------------------------------------
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 4 & 5 in Barcelona: http://oisfevents.net
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150601/e53bb1de/attachment-0002.html>


More information about the Oisf-users mailing list