Suricata

In the logs he often writes:

[3247] 19/12/2021 -- 11:32:41 - (source-af-packet.c:837) <Warning> (AFPWritePacket) -- [ERRCODE: SC_ERR_SOCKET(200)] - Sending packet failed on socket 20: Message too long
[3263] 19/12/2021 -- 11:33:13 - (source-af-packet.c:837) <Warning> (AFPWritePacket) -- [ERRCODE: SC_ERR_SOCKET(200)] - Sending packet failed on socket 68: Message too long

Launched in the kvm virtual machine

name -a

Linux VM-CK-IPS1 5.10.85-gentoo #1 SMP Wed Dec 15 22:01:04 MSK 2021 x86_64 Intel(R) Xeon(R) CPU E5-1680 v4 @ 3.40GHz GenuineIntel GNU/Linux

suricata --build-info

This is Suricata version 6.0.5-dev (87f04475a 2021-12-14)
Features: PCAP_SET_BUFF AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG HAVE_HTP_URI_NORMALIZE_HOOK PCRE_JIT HAVE_NSS HTTP2_DECOMPRESSION HAVE_LIBJANSSON TLS TLS_C11 MAGIC RUST 
SIMD support: SSE_4_2 SSE_4_1 SSE_3 
Atomic intrinsics: 1 2 4 8 16 byte(s)
64-bits, Little-endian architecture
GCC version 11.2.0, C version 201112
compiled with _FORTIFY_SOURCE=2
L1 cache line size (CLS)=64
thread local storage method: _Thread_local
compiled with LibHTP v0.5.39, linked against LibHTP v0.5.39

Suricata Configuration:
  AF_PACKET support:                       yes
  eBPF support:                            yes
  XDP support:                             yes
  PF_RING support:                         no
  NFQueue support:                         no
  NFLOG support:                           no
  IPFW support:                            no
  Netmap support:                          no 
  DAG enabled:                             no
  Napatech enabled:                        no
  WinDivert enabled:                       no

  Unix socket enabled:                     yes
  Detection enabled:                       yes

  Libmagic support:                        yes
  libnss support:                          yes
  libnspr support:                         yes
  libjansson support:                      yes
  hiredis support:                         no
  hiredis async with libevent:             no
  Prelude support:                         no
  PCRE jit:                                yes
  LUA support:                             no
  libluajit:                               no
  GeoIP2 support:                          yes
  Non-bundled htp:                         no
  Hyperscan support:                       yes
  Libnet support:                          no
  liblz4 support:                          yes
  HTTP2 decompression:                     yes

  Rust support:                            yes
  Rust strict mode:                        no
  Rust compiler path:                      /usr/bin/rustc
  Rust compiler version:                   rustc 1.57.0 (gentoo)
  Cargo path:                              /usr/bin/cargo
  Cargo version:                           cargo 1.57.0
  Cargo vendor:                            yes

  Python support:                          yes
  Python path:                             /usr/bin/python3
  Python distutils                         yes
  Python yaml                              yes
  Install suricatactl:                     yes
  Install suricatasc:                      yes
  Install suricata-update:                 not bundled

  Profiling enabled:                       no
  Profiling locks enabled:                 no

  Plugin support (experimental):           yes

Development settings:
  Coccinelle / spatch:                     no
  Unit tests enabled:                      no
  Debug output enabled:                    no
  Debug validation enabled:                no

Generic build parameters:
  Installation prefix:                     /usr
  Configuration directory:                 /etc/suricata/
  Log directory:                           /var/log/suricata/

  --prefix                                 /usr
  --sysconfdir                             /etc
  --localstatedir                          /var
  --datarootdir                            /usr/share

  Host:                                    x86_64-pc-linux-gnu
  Compiler:                                gcc (exec name) / g++ (real)
  GCC Protect enabled:                     no
  GCC march native enabled:                yes
  GCC Profile enabled:                     yes
  Position Independent Executable enabled: no
  CFLAGS                                   -g -O2 -std=c11 -pg -march=native -I${srcdir}/../rust/gen -I${srcdir}/../rust/dist
  PCAP_CFLAGS                               
  SECCFLAGS                                

fix script:

ethtool -K enp0s19 tx off sg off gro off gso off lro off tso off
ethtool -K enp0s20 tx off sg off gro off gso off lro off tso off
ethtool -K enp0s21 tx off sg off gro off gso off lro off tso off
ethtool -K enp0s22 tx off sg off gro off gso off lro off tso off
ifconfig enp0s19 mtu 3000
ifconfig enp0s20 mtu 3000
ifconfig enp0s21 mtu 3000
ifconfig enp0s22 mtu 3000
ifconfig enp0s19 up
ifconfig enp0s20 up
ifconfig enp0s21 up
ifconfig enp0s22 up
ethtool -K enp0s19 tx off sg off gro off gso off lro off tso off
ethtool -K enp0s20 tx off sg off gro off gso off lro off tso off
ethtool -K enp0s21 tx off sg off gro off gso off lro off tso off
ethtool -K enp0s22 tx off sg off gro off gso off lro off tso off
ifconfig enp0s19 mtu 3000
ifconfig enp0s20 mtu 3000
ifconfig enp0s21 mtu 3000
ifconfig enp0s22 mtu 3000
rc-service suricata restart