[Oisf-users] Suricata restart hard lock?

[Andreas Herz]

On 31/05/16 at 22:33, John Daly wrote:
> On Tue, May 31, 2016 at 3:25 PM Andreas Herz <andi at geekosphere.org> wrote:
> 
> > On 31/05/16 at 22:19, John Daly wrote:
> > > Hi all,
> > >
> > > I'm experiencing hard locks when I stop Suricata or try to restart
> > > Suricata. Is anyone else experiencing this?
> >
> > Can you post the suricata.log or verbose output?
> > --build-info as well?
> >
> 
> suricata.log
> ---------------
> 
> 31/5/2016 -- 22:17:17 - <Notice> - This is Suricata version 3.0.1 RELEASE
> 31/5/2016 -- 22:17:24 - <Warning> - [ERRCODE: SC_ERR_DEPRECATED_CONF(274)]
> - Found deprecated eve-log setting "sensor-name". Please set sensor-name
> globally.
> 31/5/2016 -- 22:17:24 - <Error> - [ERRCODE: SC_ERR_NETMAP_CREATE(263)] -
> Unable to set flags for iface "ens3f0": Operation not permitted
> 31/5/2016 -- 22:17:37 - <Notice> - all 28 packet processing threads, 4
> management threads initialized, engine started.

You might want to fix those errors, especiall the second one :)
Can you paste your .yaml somewehere?

How do you run suricata (the command)?

-- 
Andreas Herz