[Oisf-users] What does mean this error?

[Andreas Herz]

On 05/04/17 at 10:16, C. L. Martinez wrote:
> Hi all,
> 
>  Another message error using Suricata 3.2.1 under FreeBSD 11:
> 
> 5/4/2017 -- 10:13:17 - <Warning> - [ERRCODE: SC_ERR_INVALID_VALUE(130)] - Name of device should not be null
> 
>  What does it mean? My suricata startup options are:
> 
> /usr/local/bin/suricata -F /etc/suricata/bpf.conf -D -i vtnet1 --pidfile /var/run/suricata.pid -c /etc/suricata/suricata.yaml

Does this happen as well if you skip the "-i vtnet" part? It's also
necessary to define it if you don't want to use the section of the
config.

>  And I have defined my snif interface under suricata.yaml:
> 
> ##
> ## Step 4: configure common capture settings
> ##
> ## See "Advanced Capture Options" below for more options, including NETMAP
> ## and PF_RING.
> ##
> 
> pcap:
>   - interface: vtnet1
>     checksum-checks: no
>     snaplen: 1518
>   - interface: default
> 
> -- 
> Greetings,
> C. L. Martinez
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users

-- 
Andreas Herz