Mpm AC fails to alloc memory
I am getting a below error while starting suricata services. Can you please help with how I can fix this issue.
[root@suricata ~]# suricata -c /etc/suricata/suricata.yaml -s /var/data/***/md5.rules --af-packet=ens160 Initialization syslog logging with format "[%i] <%d> -- ". 24/6/2016 -- 11:01:53 - <Notice> - This is Suricata version 3.0.1 RELEASE 24/6/2016 -- 11:02:37 - <Error> - [ERRCODE: SC_ERR_MEM_ALLOC(1)] - SCRealloc failed: Cannot allocate memory, while trying to allocate 18446744071562067968 bytes 24/6/2016 -- 11:02:37 - <Error> - [ERRCODE: SC_ERR_FATAL(171)] - Out of memory. The engine cannot be initialized. Exiting...
Updated by Sahil Bhola over 6 years ago
I am running Suricata on a VM with 8 cores and 32 gb ram. Also I have attached the necessary files - Suricata.yaml, Rules and iprep to reproduce the issue. Please let me know if you want any other information.
Updated by Peter Manev over 6 years ago
The err message :
SCRealloc failed: Cannot allocate memory, while trying to allocate 18446744071562067968 bytes
looks exactly the same as in https://redmine.openinfosecfoundation.org/issues/1843
so it may be related.
Updated by Andreas Herz over 6 years ago
Sahil Bhola wrote:
Yeah, its exactly the same error. Is there any information needed from my side?
Please let me know if you have any questions for me.
"Did you try to remove some rules or iprep? For example the phishing.rules to see if you can narrow it down to some specific ruleset or the amount of rules?" :)
Maybe you have overseen my questions.