Suricata

Hello,

since 7.0.9 the BPF filter no longer works, which worked without problems under 7.0.7.

Installation via APT on Ubuntu 24.04.2 LTS (suricata is already the newest version (1:7.0.9-0ubuntu0))

Example:

bpf-filter: not net 192.168.250.0/24

Works under 7.0.7, under 7.0.9 the log says:

[3110 - W#01-ens64] 2025-03-25 07:39:46 Error: af-packet: ens64: failed to compile BPF "not net 192.168.250.0/24": snaplen of 0 rejects all packets
[3110 - W#01-ens64] 2025-03-25 07:39:46 Error: af-packet: ens64: failed to init socket for interface
[1423 - Suricata-Main] 2025-03-25 07:39:46 Error: threads: thread "W#01-ens64" failed to start: flags 0423

Regards
Florian