15/9/2019 -- 07:34:41 - <Notice> - This is Suricata version 4.1.4 RELEASE
15/9/2019 -- 07:34:41 - <Notice> - This is Suricata version 4.1.4 RELEASE
15/9/2019 -- 07:34:41 - <Info> - CPUs/cores online: 80
file
15/9/2019 -- 07:34:41 - <Config> - Adding interface enp94s0f1 from config file
15/9/2019 -- 07:34:41 - <Config> - luajit states preallocated: 128
15/9/2019 -- 07:34:41 - <Config> - 'default' server has 'request-body-minimal-inspect-size' set to 32446 and 'request-body-inspect-window' set to 3900 after randomization.
15/9/2019 -- 07:34:41 - <Config> - 'default' server has 'response-body-minimal-inspect-size' set to 41452 and 'response-body-inspect-window' set to 16411 after randomization.
15/9/2019 -- 07:34:41 - <Info> - HTTP memcap: 4294967296
15/9/2019 -- 07:34:41 - <Info> - HTTP memcap: 4294967296
/9/2019 -- 07:34:41 - <Info> - FTP memcap: 536870912
15/9/2019 -- 07:34:41 - <Info> - FTP memcap: 536870912
nd parser disabled for modbus protocol.
15/9/2019 -- 07:34:41 - <Config> - Protocol detection and parser disabled for DNP3.
15/9/2019 -- 07:34:41 - <Info> - AF_PACKET: Setting IPS mode
15/9/2019 -- 07:34:41 - <Info> - stats output device (regular) initialized: stats.log
15/9/2019 -- 07:34:41 - <Info> - Running in live mode, activating unix socket
15/9/2019 -- 07:34:47 - <Info> - 46 rule files processed. 20118 rules successfully loaded, 0 rules failed
15/9/2019 -- 07:34:47 - <Info> - Threshold config parsed: 0 rule(s) found
15/9/2019 -- 07:34:47 - <Info> - 20118 signatures processed. 1239 are IP-only rules, 6255 are inspecting packet payload, 14871 inspect application layer, 0 are decoder event only
15/9/2019 -- 07:39:12 - <Info> - AF_PACKET IPS mode activated enp94s0f0->enp94s0f1
15/9/2019 -- 07:39:12 - <Info> - af-packet will use '/etc/suricata/ebpf/xdp_filter.bpf' as XDP filter file
15/9/2019 -- 07:39:12 - <Info> - Going to use 20 thread(s)
15/9/2019 -- 07:39:13 - <Info> - AF_PACKET IPS mode activated enp94s0f1->enp94s0f0
15/9/2019 -- 07:39:13 - <Info> - af-packet will use '/etc/suricata/ebpf/xdp_filter.bpf' as XDP filter file
15/9/2019 -- 07:39:13 - <Info> - Going to use 20 thread(s)
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f1'
15/9/2019 -- 07:39:13 - <Info> - Found an MTU of 3000 for 'enp94s0f0'
15/9/2019 -- 07:39:13 - <Info> - Running in live mode, activating unix socket
15/9/2019 -- 07:39:13 - <Info> - Using unix socket file '/var/run/suricata/suricata-command.socket'
15/9/2019 -- 07:39:13 - <Notice> - all 40 packet processing threads, 7 management threads initialized, engine started.
15/9/2019 -- 07:39:22 - <Info> - All AFP capture threads are running.