Bug #6760: af-packet: hugepages Error for ARM64 and af-packet IPS mode - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #6760

closed

SA LS

af-packet: hugepages Error for ARM64 and af-packet IPS mode

Bug #6760: af-packet: hugepages Error for ARM64 and af-packet IPS mode

Added by Samiux A about 2 years ago. Updated about 1 year ago.

Status:

Closed

Priority:

Normal

Assignee:

Lukas Sismis

Target version:

8.0.0-beta1

Affected Versions:

7.0.3

Effort:

Difficulty:

Label:

Description

Suricata 7.0.3
Debian 12.x
CPU : ARM64 - 8 cores
af-packet IPS mode

I got the following error message :

[220680 - Suricata-Main] 2024-02-09 02:11:13 Error: hugepages: unable to open /sys/devices/system/node/
[220680 - Suricata-Main] 2024-02-09 02:11:13 Error: hugepages: failed to obtain number of NUMA nodes in the system

Subtasks 1 (0 open — 1 closed)

Related issues 1 (0 open — 1 closed)

SA Updated by Samiux A about 2 years ago Actions
Copy link
#1

The directory of /sys/devices/system/ is :

clockevents clocksource container cpu

The directory of /sys/devices/system/cpu is :

cpu0 cpu3 cpu6 cpuidle kernel_max online present vulnerabilities
cpu1 cpu4 cpu7 hotplug modalias possible smt
cpu2 cpu5 cpufreq isolated offline power uevent

VJ Updated by Victor Julien about 2 years ago Actions
Copy link
#2

Status changed from New to Assigned
Assignee changed from OISF Dev to Lukas Sismis
Target version changed from TBD to 8.0.0-beta1
Label Needs backport to 7.0 added

It should start up as normal, but I agree the errors are noise for af-packet. This code really should only run for capture methods that require it. IIRC currently only DPDK.