Project

General

Profile

Actions
Copy link

Bug #123

closed

When running in pcap-file mode an error is always displayed when end of file is reached

Added by Will Metcalf almost 15 years ago. Updated over 14 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Will Metcalf
Target version:
0.8.2
Affected Versions:
Effort:
Difficulty:
Label:

Description

Patch is attached...

[20100] 18/3/2010 -- 06:31:41 - (source-pcap-file.c:123) <Error> (ReceivePcapFile) -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - Error dispatching pcap file or end of pcap file, code 0 error
[20100] 18/3/2010 -- 06:31:41 - (source-pcap-file.c:207) <Info> (ReceivePcapFileThreadExitStats) -- - (ReceivePcapFile) Packets 1, bytes 58.
[20080] 18/3/2010 -- 06:31:41 - (suricata.c:910) <Info> (main) -- signal received
[20080] 18/3/2010 -- 06:31:41 - (suricata.c:913) <Info> (main) -- SIGINT or EngineStop received
[20080] 18/3/2010 -- 06:31:41 - (suricata.c:933) <Info> (main) -- all packets processed by threads, stopping engine
[20080] 18/3/2010 -- 06:31:41 - (suricata.c:946) <Info> (main) -- time elapsed 1s

Files

0001-fix-for-pcap-error-displayed-at-exit-flow-mem.h-remo.patch (1.49 KB) 0001-fix-for-pcap-error-displayed-at-exit-flow-mem.h-remo.patch Error converted into info, removed flow-mem.h from src/Makefile.am as it didn't exist anymore Will Metcalf, 03/18/2010 06:00 AM
Actions
Copy link
 #1

Updated by Victor Julien over 14 years ago

  • Status changed from New to Closed
  • % Done changed from 90 to 100

I missed this patch so I fixed in myself already. Thanks anyway Will.

Btw, please limit the patch to the issue itself next time. So the flow-mem.h thing should be a separate patch.

Actions
Copy link

Also available in: Atom PDF