Project

General

Profile

Actions

Optimization #1077

closed

Do not use peers in single mode

Added by Eric Leblond about 10 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

When using single mode we only have one thread so IPS mode can not be activated. Currently this leads to this message.

[6251] 8/1/2014 -- 16:10:43 - (suricata.c:955) <Notice> (SCPrintVersion) -- This is Suricata version 2.0dev (rev b7243c6)
[6251] 8/1/2014 -- 16:10:44 - (detect.c:406) <Warning> (SigLoadSignatures) -- [ERRCODE: SC_ERR_NO_RULES(42)] - No rules loaded from /home/eric/builds/suricata/etc/suricata/rules/emerging-icmp.rules
[6251] 8/1/2014 -- 16:10:49 - (source-af-packet.c:355) <Error> (AFPPeersListCheck) -- [ERRCODE: SC_ERR_AFP_CREATE(190)] - Threads number not equals
[6251] 8/1/2014 -- 16:10:49 - (runmode-af-packet.c:475) <Error> (RunModeIdsAFPSingle) -- [ERRCODE: SC_ERR_RUNMODE(187)] - Some IPS capture threads did not peer.

Removing the peers handling in this mode could be a nice cleanup.

Actions #1

Updated by Song Liu about 10 years ago

  • Assignee set to Song Liu
Actions #2

Updated by Victor Julien almost 8 years ago

  • Status changed from New to Closed
  • Assignee deleted (Song Liu)
  • Priority changed from Low to Normal

If this is still an issue please reopen with a sample config.

Actions

Also available in: Atom PDF