[Oisf-users] What does mean this error?
C. L. Martinez
carlopmart at gmail.com
Sun Apr 9 07:18:13 UTC 2017
On Sun, Apr 09, 2017 at 08:24:42AM +0200, Peter Manev wrote:
>
>
> > On 9 Apr 2017, at 07:37, C. L. Martinez <carlopmart at gmail.com> wrote:
> >
> >> On Sat, Apr 08, 2017 at 10:48:24PM +0200, Andreas Herz wrote:
> >>> On 05/04/17 at 10:16, C. L. Martinez wrote:
> >>> Hi all,
> >>>
> >>> Another message error using Suricata 3.2.1 under FreeBSD 11:
> >>>
> >>> 5/4/2017 -- 10:13:17 - <Warning> - [ERRCODE: SC_ERR_INVALID_VALUE(130)] - Name of device should not be null
> >>>
> >>> What does it mean? My suricata startup options are:
> >>>
> >>> /usr/local/bin/suricata -F /etc/suricata/bpf.conf -D -i vtnet1 --pidfile /var/run/suricata.pid -c /etc/suricata/suricata.yaml
> >>
> >> Does this happen as well if you skip the "-i vtnet" part? It's also
> >> necessary to define it if you don't want to use the section of the
> >> config.
> >
> > If I omit "-i vtnet1" from command line, suricata doesn't start ...
>
> If you use the same start line but comment out in your pcap: section -
> #-interface: default
> Would the err still be there ?
>
Yes, same error:
9/4/2017 -- 07:16:20 - <Notice> - This is Suricata version 3.2.1 RELEASE
9/4/2017 -- 07:16:25 - <Warning> - [ERRCODE: SC_ERR_INVALID_VALUE(130)] - Name of device should not be null
cat /etc/suricata/suricata.yaml
##
## Step 4: configure common capture settings
##
## See "Advanced Capture Options" below for more options, including NETMAP
## and PF_RING.
##
pcap:
- interface: vtnet1
checksum-checks: no
snaplen: 1518
#- interface: default
--
Greetings,
C. L. Martinez
More information about the Oisf-users
mailing list