Project

General

Profile

Actions

Bug #1976

open

ioctl warnings at startup and shutdown with dropped privileges

Added by Victor Julien almost 6 years ago. Updated about 2 years ago.

Status:
Feedback
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

$ sudo ./src/suricata -i eth0 -c suricata.yaml --disable-detection --user suricata --group suricata
[sudo] password for victor: 
[25474] 6/12/2016 -- 03:59:21 - (suricata.c:1558) <Info> (ParseCommandLine) -- detection engine disabled
[25474] 6/12/2016 -- 03:59:21 - (suricata.c:1007) <Notice> (SCPrintVersion) -- This is Suricata version 3.2dev (rev 94bc7e5)
[25474] 6/12/2016 -- 03:59:21 - (util-ioctl.c:315) <Warning> (SetEthtoolValue) -- [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get feature via ioctl for 'eth0': Operation not permitted (1)
[25474] 6/12/2016 -- 03:59:21 - (util-ioctl.c:315) <Warning> (SetEthtoolValue) -- [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get feature via ioctl for 'eth0': Operation not permitted (1)
[25474] 6/12/2016 -- 03:59:21 - (util-ioctl.c:315) <Warning> (SetEthtoolValue) -- [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get feature via ioctl for 'eth0': Operation not permitted (1)
[25474] 6/12/2016 -- 03:59:21 - (util-ioctl.c:315) <Warning> (SetEthtoolValue) -- [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get feature via ioctl for 'eth0': Operation not permitted (1)
[25474] 6/12/2016 -- 03:59:21 - (tm-threads.c:2098) <Notice> (TmThreadWaitOnThreadInit) -- all 4 packet processing threads, 4 management threads initialized, engine started.
^C[25474] 6/12/2016 -- 03:59:22 - (suricata.c:2630) <Notice> (main) -- Signal Received.  Stopping engine.
[25474] 6/12/2016 -- 03:59:22 - (util-device.c:283) <Notice> (LiveDeviceListClean) -- Stats for 'eth0':  pkts: 7, drop: 0 (0.00%), invalid chksum: 0
[25474] 6/12/2016 -- 03:59:22 - (util-ioctl.c:315) <Warning> (SetEthtoolValue) -- [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get feature via ioctl for 'eth0': Operation not permitted (1)
[25474] 6/12/2016 -- 03:59:22 - (util-ioctl.c:315) <Warning> (SetEthtoolValue) -- [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get feature via ioctl for 'eth0': Operation not permitted (1)
[25474] 6/12/2016 -- 03:59:22 - (util-ioctl.c:315) <Warning> (SetEthtoolValue) -- [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get feature via ioctl for 'eth0': Operation not permitted (1)
[25474] 6/12/2016 -- 03:59:22 - (util-ioctl.c:315) <Warning> (SetEthtoolValue) -- [ERRCODE: SC_ERR_SYSCALL(50)] - Failure when trying to get feature via ioctl for 'eth0': Operation not permitted (1)
Actions #1

Updated by Victor Julien almost 6 years ago

  • Status changed from New to Assigned
  • Assignee set to Victor Julien
  • Target version set to 70

These warnings are related to Suricata trying to disable various offloading settings.

Workaround:

Disable offloading settings manually with ethtool before starting Suricata. To see which Suricata would have disabled start up with: --set capture.disable-offloading=false

Actions #2

Updated by Andreas Herz about 3 years ago

I can't reproduce that on my Arch system anymore. Can someone confirm with others?

Actions #3

Updated by Victor Julien almost 3 years ago

  • Status changed from Assigned to Feedback
  • Assignee changed from Victor Julien to Community Ticket
Actions #4

Updated by Victor Julien about 2 years ago

  • Target version changed from 70 to TBD
Actions

Also available in: Atom PDF