Project

General

Custom queries

Profile

Actions

Bug #7678

open

mpm/ac: error "Just ran out of space in the queue"

Added by Jon Stumpf about 2 months ago. Updated about 22 hours ago.

Status:
Resolved
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

I am running suricata 7.0.10 on OPNSense 25.1.

Versions
OPNsense 25.1.5_5-amd64
FreeBSD 14.2-RELEASE-p2
OpenSSL 3.0.16

I received this error message "[101124] <Error> -- Just ran out of space in the queue. Please file a bug report on this" on April 19th. So, I am filing a bug report as requested.

I found only one previous issue related to this error message: Optimization #1603.

I suspect the fix is the same - increase the queue size.

Please let me know if you require any additional information regarding my configuration.


Subtasks 1 (1 open0 closed)

Bug #7779: mpm/ac: error "Just ran out of space in the queue" (7.0.x backport)In ReviewPhilippe AntoineActions

Related issues 2 (1 open1 closed)

Related to Suricata - Bug #7710: Suricata Shutting Down Due to Queue IssueRejectedOISF DevActions
Related to Suricata - Optimization #6264: mpm/ac-ks: reduce stack usageResolvedPhilippe AntoineActions
Actions #1

Updated by Victor Julien about 1 month ago

  • Related to Bug #7710: Suricata Shutting Down Due to Queue Issue added
Actions #2

Updated by Victor Julien 6 days ago

  • Subject changed from Just ran out of space in the queue to mpm/ac: error "Just ran out of space in the queue"
  • Target version changed from TBD to 8.0.0
  • Label Needs backport to 7.0 added
Actions #3

Updated by Victor Julien 4 days ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Philippe Antoine
Actions #4

Updated by Jason Ish 4 days ago

To reproduce, you can use the Treatfox ruleset, something like:

curl -OL https://threatfox.abuse.ch/downloads/threatfox_suricata.rules
./src/suricata -T -l . -S ./threatfox_suricata.rules --set mpm-algo=ac

which results in:
i: suricata: This is Suricata version 8.0.0-rc1 RELEASE running in SYSTEM mode
E: mpm-ac: Just ran out of space in the queue. Please file a bug report on this

Actions #5

Updated by Philippe Antoine 3 days ago

  • Status changed from Assigned to In Review
Actions #6

Updated by Philippe Antoine 3 days ago

Actions #7

Updated by Philippe Antoine 1 day ago

  • Status changed from In Review to Closed
Actions #8

Updated by Philippe Antoine 1 day ago

  • Status changed from Closed to Resolved
Actions #9

Updated by OISF Ticketbot about 22 hours ago

  • Subtask #7779 added
Actions #10

Updated by OISF Ticketbot about 22 hours ago

  • Label deleted (Needs backport to 7.0)
Actions

Also available in: Atom PDF