Suricata

This looks like duplicate of the one here - https://redmine.openinfosecfoundation.org/issues/1605

Franco - can you please try out the posted patch and give some feedback?

Hi Peter,

We tried the patch for #1605, this is the new output:

5/12/2015 -- 10:17:09 - <Warning> - [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get MTU via ioctl for 'em1+': Device not configured (6)

Our netmap config is as follows:

netmap:
  - interface: default
    threads: auto
    copy-mode: ips
    disable-promisc: yes
    checksum-checks: auto

  - interface: em1
    copy-iface: em1+

  - interface: em1+
    copy-iface: em1

em1+ is only a device abstraction, not an available interface in the system. Hope that helps.

Cheers,
Franco

What do you mean - a device abstraction?
Would you get the same err if you us a regular device?

em1+ is tied to em1 via netmap underneath, the OS/ifconfig itself does not know about it, it can only ever configure the actual device.

Configuring em1 yields no such error.

There are two options: (1) not configuring "+" devices, or (2) configuring the parent device instead.

If you try a different existing interface - em2 for example - would you have the same err?