[Oisf-users] Suricata and XDP

[Eric Leblond]

Hi,

The eBPF and XDP support have been completely updated in latest master
(merge request accepted today). Is it possible for you to retry with
latest code ? It may fix things by side-effect. ?

BR,

On Tue, 2019-06-18 at 19:40 +0000, Nelson, Cooper wrote:
> Nope:
> 
> $ ldd /usr/bin/suricata | fgrep libbpf
>         libbpf.so.0 => /usr/lib64/libbpf.so.0 (0x00007f16c43e8000)
> 
> -Coop
> 
> -----Original Message-----
> From: Peter Manev <petermanev at gmail.com> 
> Sent: Tuesday, June 18, 2019 4:50 AM
> To: Nelson, Cooper <cnelson at ucsd.edu>
> Cc: ltishend <ltishend at uw.edu>; 
> oisf-users at lists.openinfosecfoundation.org
> Subject: Re: [Oisf-users] Suricata and XDP
> 
> On Mon, Jun 10, 2019 at 8:29 PM Nelson, Cooper <cnelson at ucsd.edu>
> wrote:
> > FYI I've been seeing the same error on my Gentoo systems, running 5
> > series kernel and suricata-dev.
> > 
> > Spent a fair amount of time researching it and have yet to find a
> > solution.
> > 
> 
> Might be   along shot ..but there is no other libbpf library laying
> around somewhere?
> 
> 
> 
> > -Coop
> > 
> > -----Original Message-----
> > From: Oisf-users <
> > oisf-users-bounces at lists.openinfosecfoundation.org> On Behalf Of
> > ltishend
> > Sent: Monday, June 10, 2019 9:28 AM
> > To: Peter Manev <petermanev at gmail.com>
> > Cc: oisf-users at lists.openinfosecfoundation.org
> > Subject: Re: [Oisf-users] Suricata and XDP
> > 
> > 
> > Unfortunately after rebuild of suricata, no change in XDP error:
> > 
> > [13404] 10/6/2019 -- 09:24:15 - (util-ebpf.c:308) <Error>
> > (EBPFSetupXDP) -- [ERRCODE: SC_ERR_INVALID_VALUE(130)] - Unable to
> > set XDP on 'enp175s0f1': Invalid argument (-22) [13404] 10/6/2019
> > -- 09:24:15 - (runmode-af-packet.c:486) <Warning> (ParseAFPConfig)
> > -- [ERRCODE: SC_ERR_INVALID_VALUE(130)] - Error when setting up XDP
> > 
> > 
> > _______________________________________________
> > Suricata IDS Users mailing list: 
> > oisf-users at openinfosecfoundation.org
> > Site: http://suricata-ids.org | Support: 
> > http://suricata-ids.org/support/
> > List: 
> > https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> > 
> > Conference: https://suricon.net
> > Trainings: https://suricata-ids.org/training/
> 
> 
> -- 
> Regards,
> Peter Manev
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: 
> http://suricata-ids.org/support/
> List: 
> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> 
> Conference: https://suricon.net
> Trainings: https://suricata-ids.org/training/
-- 
Eric Leblond <eric at regit.org>