Bug #6760: Hugepages Error for ARM64 and af-packet IPS mode - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #6760

closed

Hugepages Error for ARM64 and af-packet IPS mode

Added by Samiux A 10 months ago. Updated 9 months ago.

Status:

Closed

Priority:

Normal

Assignee:

Lukas Sismis

Target version:

8.0.0-beta1

Affected Versions:

7.0.3

Effort:

Difficulty:

Label:

Description

Suricata 7.0.3
Debian 12.x
CPU : ARM64 - 8 cores
af-packet IPS mode

I got the following error message :

[220680 - Suricata-Main] 2024-02-09 02:11:13 Error: hugepages: unable to open /sys/devices/system/node/
[220680 - Suricata-Main] 2024-02-09 02:11:13 Error: hugepages: failed to obtain number of NUMA nodes in the system

Subtasks 1 (0 open — 1 closed)

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Samiux A 10 months ago

The directory of /sys/devices/system/ is :

clockevents clocksource container cpu

The directory of /sys/devices/system/cpu is :

cpu0 cpu3 cpu6 cpuidle kernel_max online present vulnerabilities
cpu1 cpu4 cpu7 hotplug modalias possible smt
cpu2 cpu5 cpufreq isolated offline power uevent

Actions

Copy link

Updated by Victor Julien 10 months ago

Status changed from New to Assigned
Assignee changed from OISF Dev to Lukas Sismis
Target version changed from TBD to 8.0.0-beta1
Label Needs backport to 7.0 added

It should start up as normal, but I agree the errors are noise for af-packet. This code really should only run for capture methods that require it. IIRC currently only DPDK.

Actions

Copy link