[Oisf-users] Strange issue with Suricata 4.1.2 under FreeBSD 12

[Carlos Lopez]

More info ... I have started a Bro IDS on the same machine and sees traffic without problems ...



Regards,
C. L. Martinez


________________________________________
From: Carlos Lopez <clopmz at outlook.com>
Sent: 21 January 2019 14:37
To: oisf users
Subject: Strange issue with Suricata 4.1.2 under FreeBSD 12

Hi all,

 I have a strange issue with Suricata 4.1.2 under FreeBSD: suricata doesn't see traffic. Traffic is vlan's tagged. Using tcpdump with the options "-ttt -env -i ix1", I can see the traffic without problems.

The option of net.bpf.zerocopy_enable=0 and I'm using netmap. Any idea why I can't see the traffic? I am completely lost..



Regards,
C. L. Martinez