suricata and macos/darwin: [ERRCODE: SC_ERR_MAGIC_LOAD(197)] - magic_load failed: File 5.19 supports only version 12 magic files. `/usr/share/file/magic.mgc' is version 7
Test with macports Portfile from https://trac.macports.org/ticket/42858
both 2.1beta1 and 2.0.3 give this error while running in test mode
Probably related to https://redmine.openinfosecfoundation.org/issues/437
Current libmagic in Macports is 5.19
Test on Mavericks/10.9.4
Updated by Jason Ish over 7 years ago
This is fixed by https://github.com/inliniac/suricata/pull/1823
The problem is that OS X does not include a libmagic, but it does include a magic file. So you have to install libmagic from MacPorts or Brew, but the location of the magic file is not updated. By not setting the magic file, the library linked to will pick up the correct one.
The work-around is to fix the location of magic-file, or commenting out should do the right thing as well.