[Oisf-users] De-queuing suricata at shutdown

Claudio Kuenzler ck at claudiokuenzler.com
Tue Sep 15 17:31:36 UTC 2015


On Tue, Sep 15, 2015 at 7:11 PM, James Moe <jimoe at sohnen-moe.com> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 09/13/2015 10:55 AM, James Moe wrote:
> > Suricata is running in IPS mode. It is started after creating a
> > queue for NFQUEUE. This works fine. At shutdown, however, suricata
> > is stopped but the queue is still in place blocking the packet
> > stream, and stalling shutdown. Is there a recommended way of
> > stopping suricata and removing the queue automatically at
> > shutdown?
> >
>   Any one?
>

Suri is not running in IPS mode in my setup but could this be related to
bug #1360?
https://redmine.openinfosecfoundation.org/issues/1360
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150915/e417cce6/attachment-0002.html>


More information about the Oisf-users mailing list