Bug #7678
closed
mpm/ac: error "Just ran out of space in the queue"
Added by Jon Stumpf 3 months ago.
Updated about 2 months ago.
Description
I am running suricata 7.0.10 on OPNSense 25.1.
Versions
OPNsense 25.1.5_5-amd64
FreeBSD 14.2-RELEASE-p2
OpenSSL 3.0.16
I received this error message "[101124] <Error> -- Just ran out of space in the queue. Please file a bug report on this" on April 19th. So, I am filing a bug report as requested.
I found only one previous issue related to this error message: Optimization #1603.
I suspect the fix is the same - increase the queue size.
Please let me know if you require any additional information regarding my configuration.
- Related to Bug #7710: Suricata Shutting Down Due to Queue Issue added
- Subject changed from Just ran out of space in the queue to mpm/ac: error "Just ran out of space in the queue"
- Target version changed from TBD to 8.0.0
- Label Needs backport to 7.0 added
- Status changed from New to Assigned
- Assignee changed from OISF Dev to Philippe Antoine
To reproduce, you can use the Treatfox ruleset, something like:
curl -OL https://threatfox.abuse.ch/downloads/threatfox_suricata.rules
./src/suricata -T -l . -S ./threatfox_suricata.rules --set mpm-algo=ac
which results in:
i: suricata: This is Suricata version 8.0.0-rc1 RELEASE running in SYSTEM mode
E: mpm-ac: Just ran out of space in the queue. Please file a bug report on this
- Status changed from Assigned to In Review
- Status changed from In Review to Closed
- Status changed from Closed to Resolved
- Label deleted (
Needs backport to 7.0)
- Status changed from Resolved to Closed
Also available in: Atom
PDF