Project

General

Profile

Actions

Bug #1522

closed

lua-output problems with pfring

Added by Edward Fjellskål over 9 years ago. Updated over 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

Testing "Suricata version 2.1beta4 RELEASE" on Ubuntu 14.04 using afpacket seems to work with lua-output scripts.

But testing it with pfring 6.0.3 ZC it seems to have some issues.

After around ~1500 to ~3000 http requests, the output scripts stops logging.

The default http-log also stops logging.

Killing suricata sometimes seems to need -9 when it reaches this state.

There might be more issues using lua and pfring.

Simple lua script attached that I used.


Files

nt-http-count.lua (933 Bytes) nt-http-count.lua Simple lua script Edward Fjellskål, 07/28/2015 03:52 PM
Actions

Also available in: Atom PDF