Bug #926: prealloc host value in suricata.yaml - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #926

closed

prealloc host value in suricata.yaml

Added by Peter Manev over 10 years ago. Updated over 10 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Anoop Saldanha

Target version:

2.0beta2

Affected Versions:

Effort:

Difficulty:

Label:

Description

This is Suricata version 2.0beta1 RELEASE and latest git

If we set up:

host:
  hash-size: 4096
  prealloc: 1000000000000000
  memcap: 16777216

We get an err saying:

- <Info> - AutoFP mode using default "Active Packets" flow load balancer
- <Info> - preallocated 1024 packets. Total memory 4362240
- <Error> - [ERRCODE: SC_ERR_NUMERIC_VALUE_ERANGE(61)] - Numeric value out of range (1000000000000000 > 4294967295)

Which is not descriptive in terms of at which line in yaml the err occurred and/or what variable was parsed when the ERR occurred.
Suricata does not stop during the initialization/start phase in this case and it is not clear if it defaults to the maximum 4294967295 or not.