[Oisf-users] tpacket V3

[Charles Devoe]

What I found was the version of libpcap is too old.  I need to upgrade that to at least 1.5 and then rebuild Suricata.  Of course, to upgrade libpcap I need to upgrade gliobc2.  Which likely has other dependencies…SO, I’m going to Red Hat 7 in hopes the libraries are newer.

Charles DeVoe Jr.
Manager of Engineering
Multi-State Information Sharing and Analysis Center (MS-ISAC)
31 Tech Valley Drive
East Greenbush, NY 12061

charles.devoe at cisecurity.org<mailto:charles.devoe at cisecurity.org>
(518) 266-3494
7x24 Security Operations Center
SOC at cisecurity.org<mailto:SOC at cisecurity.org> - 1-866-787-4722


[cid:image001.png at 01D2F965.2E3564F0]
       [id:image002.png at 01D2926D.D9CF2E90] <https://www.facebook.com/CenterforIntSec>     [id:image003.png at 01D2926D.D9CF2E90] <https://twitter.com/CISecurity>    [id:image004.png at 01D2926D.D9CF2E90] <https://www.youtube.com/user/TheCISecurity>     [id:image005.png at 01D2926D.D9CF2E90] <https://www.linkedin.com/company/the-center-for-internet-security>

From: Duarte Silva [mailto:duarte.silva at serializing.me]
Sent: Wednesday, November 08, 2017 1:58 AM
To: Charles Devoe <Charles.Devoe at cisecurity.org>; oisf-users at lists.openinfosecfoundation.org
Subject: RE: [Oisf-users] tpacket V3



Hi Charles,

Can you check [1]? May help you debug he ssue and find the root cause.

Cheers,
Duarte

[1] https://redmine.openinfosecfoundation.org/issues/1994<https://redmine.openinfosecfoundation.org/issues/1994>

De: Charles Devoe<mailto:Charles.Devoe at cisecurity.org>
Enviado: 7 de novembro de 2017 15:40
Para: oisf-users at lists.openinfosecfoundation.org<mailto:oisf-users at lists.openinfosecfoundation.org>
Assunto: [Oisf-users] tpacket V3

I have suricata 4.0.1 running on Oracle Linux 6.9 (Red Hat Variant) Kernel is 4.1.12-103.9.2.el6uek.x86_64

When trying to run Suricata I get the following error

System too old for tpacket v3 switching to v2


What do I need to get this capability?

I will be off in Google land looking for the fix, However, if someone could help me out it would be greatly appreciated.


This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.

. . . . .


.....
This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.

. . . . .
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20171108/a9df4eee/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 14323 bytes
Desc: image001.png
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20171108/a9df4eee/attachment-0010.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 1892 bytes
Desc: image002.png
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20171108/a9df4eee/attachment-0011.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 2176 bytes
Desc: image003.png
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20171108/a9df4eee/attachment-0012.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 1889 bytes
Desc: image004.png
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20171108/a9df4eee/attachment-0013.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 2058 bytes
Desc: image005.png
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20171108/a9df4eee/attachment-0014.png>