[Oisf-users] Suricata 2.0.4 crash on Freebsd with No Buffer space available message

mali dorn mailleest14 at gmail.com
Sat Apr 23 07:01:15 UTC 2016


We use Suricata 2.0.4 on FreeBSD 9.2 (64-btis) in IPS mode (with IPFW) and
it works perfectly. However, when we limit bandwidth using PF and ALTQ, we
see instant crash of Suricata when the bandwidth reaches to its maximum.
Here is my pf rule
queue http-em0-out bandwidth 120Kb  hfsc (  upperlimit 120Kb )

Following messages appear in log file.

<Warning> - [ERRCODE: SC_WARN_IPFW_XMIT(84)] - Write to ipfw divert socket
failed: No buffer space available
<Warning> - [ERRCODE: SC_WARN_IPFW_XMIT(84)] - Write to ipfw divert socket
failed: No buffer space available
<Warning> - [ERRCODE: SC_WARN_IPFW_XMIT(84)] - Write to ipfw divert socket
failed: No buffer space available

I was wondering what is the root cause of the problem?
Thanks in advance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20160423/97a88079/attachment.html>


More information about the Oisf-users mailing list