Bug #1827
closed
Mpm AC fails to alloc memory
Added by Sahil Bhola over 8 years ago.
Updated almost 8 years ago.
Description
I am getting a below error while starting suricata services. Can you please help with how I can fix this issue.
[root@suricata ~]# suricata -c /etc/suricata/suricata.yaml -s /var/data/***/md5.rules --af-packet=ens160
Initialization syslog logging with format "[%i] <%d> -- ".
24/6/2016 -- 11:01:53 - <Notice> - This is Suricata version 3.0.1 RELEASE
24/6/2016 -- 11:02:37 - <Error> - [ERRCODE: SC_ERR_MEM_ALLOC(1)] - SCRealloc failed: Cannot allocate memory, while trying to allocate 18446744071562067968 bytes
24/6/2016 -- 11:02:37 - <Error> - [ERRCODE: SC_ERR_FATAL(171)] - Out of memory. The engine cannot be initialized. Exiting...
Files
- Description updated (diff)
What are the steps to reproduce? Can you share your yaml & rules? What hardware do you use?
I am running Suricata on a VM with 8 cores and 32 gb ram. Also I have attached the necessary files - Suricata.yaml, Rules and iprep to reproduce the issue. Please let me know if you want any other information.
Thanks
Sahil
Also I am attaching the complete output when I am starting Suricata services. Please find attached the suricata output file.
Did you try to remove some rules or iprep? For example the phishing.rules to see if you can narrow it down to some specific ruleset or the amount of rules?
Yeah, its exactly the same error. Is there any information needed from my side?
Please let me know if you have any questions for me.
Sahil Bhola wrote:
Yeah, its exactly the same error. Is there any information needed from my side?
Please let me know if you have any questions for me.
"Did you try to remove some rules or iprep? For example the phishing.rules to see if you can narrow it down to some specific ruleset or the amount of rules?" :)
Maybe you have overseen my questions.
- Target version set to TBD
- Subject changed from ERRCODE: SC_ERR_MEM_ALLOC(1)] to Mpm AC fails to alloc memory
- Status changed from New to Assigned
- Target version changed from TBD to 70
- Assignee changed from Victor Julien to Sascha Steinbiss
- Status changed from Assigned to Closed
- Target version changed from 70 to 3.2.1
- Tracker changed from Support to Bug
Also available in: Atom
PDF