[Oisf-users] What does mean this error?

[Peter Manev]

On Sun, Apr 9, 2017 at 9:18 AM, C. L. Martinez <carlopmart at gmail.com> wrote:
> On Sun, Apr 09, 2017 at 08:24:42AM +0200, Peter Manev wrote:
>>
>>
>> > On 9 Apr 2017, at 07:37, C. L. Martinez <carlopmart at gmail.com> wrote:
>> >
>> >> On Sat, Apr 08, 2017 at 10:48:24PM +0200, Andreas Herz wrote:
>> >>> On 05/04/17 at 10:16, C. L. Martinez wrote:
>> >>> Hi all,
>> >>>
>> >>> Another message error using Suricata 3.2.1 under FreeBSD 11:
>> >>>
>> >>> 5/4/2017 -- 10:13:17 - <Warning> - [ERRCODE: SC_ERR_INVALID_VALUE(130)] - Name of device should not be null
>> >>>
>> >>> What does it mean? My suricata startup options are:
>> >>>
>> >>> /usr/local/bin/suricata -F /etc/suricata/bpf.conf -D -i vtnet1 --pidfile /var/run/suricata.pid -c /etc/suricata/suricata.yaml
>> >>
>> >> Does this happen as well if you skip the "-i vtnet" part? It's also
>> >> necessary to define it if you don't want to use the section of the
>> >> config.
>> >
>> > If I omit "-i vtnet1" from command line, suricata doesn't start ...
>>
>> If you use the same start line but comment out in your pcap: section -
>> #-interface: default
>> Would the err still be there ?
>>
>
> Yes, same error:
>
> 9/4/2017 -- 07:16:20 - <Notice> - This is Suricata version 3.2.1 RELEASE
> 9/4/2017 -- 07:16:25 - <Warning> - [ERRCODE: SC_ERR_INVALID_VALUE(130)] - Name of device should not be null
>
> cat /etc/suricata/suricata.yaml
>

Is it possible to send me your yaml ? (mask out the networks)
See if i can reproduce it.


> ##
> ## Step 4: configure common capture settings
> ##
> ## See "Advanced Capture Options" below for more options, including NETMAP
> ## and PF_RING.
> ##
>
> pcap:
>   - interface: vtnet1
>     checksum-checks: no
>     snaplen: 1518
>   #- interface: default
>
> --
> Greetings,
> C. L. Martinez
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users



-- 
Regards,
Peter Manev