Bug #4916
Updated by Victor Julien over 2 years ago
In the logs he often writes: <pre> [3247] 19/12/2021 -- 11:32:41 - (source-af-packet.c:837) <Warning> (AFPWritePacket) -- [ERRCODE: SC_ERR_SOCKET(200)] - Sending packet failed on socket 20: Message too long [3263] 19/12/2021 -- 11:33:13 - (source-af-packet.c:837) <Warning> (AFPWritePacket) -- [ERRCODE: SC_ERR_SOCKET(200)] - Sending packet failed on socket 68: Message too long </pre> Launched in the kvm virtual machine name -a <pre> [spoiler] Linux VM-CK-IPS1 5.10.85-gentoo #1 SMP Wed Dec 15 22:01:04 MSK 2021 x86_64 Intel(R) Xeon(R) CPU E5-1680 v4 @ 3.40GHz GenuineIntel GNU/Linux </pre> [/spoiler] suricata --build-info <pre> [spoiler] This is Suricata version 6.0.5-dev (87f04475a 2021-12-14) Features: PCAP_SET_BUFF AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG HAVE_HTP_URI_NORMALIZE_HOOK PCRE_JIT HAVE_NSS HTTP2_DECOMPRESSION HAVE_LIBJANSSON TLS TLS_C11 MAGIC RUST SIMD support: SSE_4_2 SSE_4_1 SSE_3 Atomic intrinsics: 1 2 4 8 16 byte(s) 64-bits, Little-endian architecture GCC version 11.2.0, C version 201112 compiled with _FORTIFY_SOURCE=2 L1 cache line size (CLS)=64 thread local storage method: _Thread_local compiled with LibHTP v0.5.39, linked against LibHTP v0.5.39 Suricata Configuration: AF_PACKET support: yes eBPF support: yes XDP support: yes PF_RING support: no NFQueue support: no NFLOG support: no IPFW support: no Netmap support: no DAG enabled: no Napatech enabled: no WinDivert enabled: no Unix socket enabled: yes Detection enabled: yes Libmagic support: yes libnss support: yes libnspr support: yes libjansson support: yes hiredis support: no hiredis async with libevent: no Prelude support: no PCRE jit: yes LUA support: no libluajit: no GeoIP2 support: yes Non-bundled htp: no Hyperscan support: yes Libnet support: no liblz4 support: yes HTTP2 decompression: yes Rust support: yes Rust strict mode: no Rust compiler path: /usr/bin/rustc Rust compiler version: rustc 1.57.0 (gentoo) Cargo path: /usr/bin/cargo Cargo version: cargo 1.57.0 Cargo vendor: yes Python support: yes Python path: /usr/bin/python3 Python distutils yes Python yaml yes Install suricatactl: yes Install suricatasc: yes Install suricata-update: not bundled Profiling enabled: no Profiling locks enabled: no Plugin support (experimental): yes Development settings: Coccinelle / spatch: no Unit tests enabled: no Debug output enabled: no Debug validation enabled: no Generic build parameters: Installation prefix: /usr Configuration directory: /etc/suricata/ Log directory: /var/log/suricata/ --prefix /usr --sysconfdir /etc --localstatedir /var --datarootdir /usr/share Host: x86_64-pc-linux-gnu Compiler: gcc (exec name) / g++ (real) GCC Protect enabled: no GCC march native enabled: yes GCC Profile enabled: yes Position Independent Executable enabled: no CFLAGS -g -O2 -std=c11 -pg -march=native -I${srcdir}/../rust/gen -I${srcdir}/../rust/dist PCAP_CFLAGS SECCFLAGS </pre> [/spoiler] fix script: <pre> [spoiler] ethtool -K enp0s19 tx off sg off gro off gso off lro off tso off ethtool -K enp0s20 tx off sg off gro off gso off lro off tso off ethtool -K enp0s21 tx off sg off gro off gso off lro off tso off ethtool -K enp0s22 tx off sg off gro off gso off lro off tso off ifconfig enp0s19 mtu 3000 ifconfig enp0s20 mtu 3000 ifconfig enp0s21 mtu 3000 ifconfig enp0s22 mtu 3000 ifconfig enp0s19 up ifconfig enp0s20 up ifconfig enp0s21 up ifconfig enp0s22 up ethtool -K enp0s19 tx off sg off gro off gso off lro off tso off ethtool -K enp0s20 tx off sg off gro off gso off lro off tso off ethtool -K enp0s21 tx off sg off gro off gso off lro off tso off ethtool -K enp0s22 tx off sg off gro off gso off lro off tso off ifconfig enp0s19 mtu 3000 ifconfig enp0s20 mtu 3000 ifconfig enp0s21 mtu 3000 ifconfig enp0s22 mtu 3000 rc-service suricata restart </pre> [/spoiler]