Project

General

Profile

Support #1474

Updated by Victor Julien almost 9 years ago

After installing Suricata while trying to run /usr/bin/suricata -c /etc/suricata/suricata.yaml --af-packet em1 (network interface name) 
 I got below error message: 
 <pre> 
 root@suricata:/home/suricata# /usr/bin/suricata -c /etc/suricata/suricata.yaml --af-packet em1 
 26/5/2015 -- 15:54:16 - <Notice> - This is Suricata version 2.0.8 RELEASE 
 26/5/2015 -- 15:54:22 - <Notice> - all 14 packet processing threads, 3 management threads initialized, engine started. 
 26/5/2015 -- 15:54:22 - <Error> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Unable to find iface eth0: No such device 
 26/5/2015 -- 15:54:22 - <Error> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't find iface eth0 
 26/5/2015 -- 15:54:22 - <Warning> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, retrying soon 
 26/5/2015 -- 15:54:22 - <Error> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Unable to find iface eth1: No such device 
 26/5/2015 -- 15:54:22 - <Error> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't find iface eth1 
 26/5/2015 -- 15:54:22 - <Warning> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Couldn't init AF_PACKET socket, retrying soon 
 26/5/2015 -- 15:54:42 - <Warning> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Can not open iface 'eth0' 
 26/5/2015 -- 15:54:42 - <Warning> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Can not open iface 'eth1' 
 ^C26/5/2015 -- 15:54:44 - <Notice> - Signal Received.    Stopping engine. 
 26/5/2015 -- 15:54:45 - <Notice> - Stats for 'eth0':    pkts: 0, drop: 0 (-nan%), invalid chksum: 0 
 26/5/2015 -- 15:54:45 - <Notice> - Stats for 'eth1':    pkts: 0, drop: 0 (-nan%), invalid chksum: 0 
 root@suricata:/home/suricata# 
 </pre> 


 my if config detail 
 <pre> 
 root@suricata:/home/suricata# ifconfig 
 em1         Link encap:Ethernet    HWaddr 00:25:90:de:1f:0b 
           inet addr:10.0.0.45    Bcast:10.255.255.255    Mask:255.0.0.0 
           inet6 addr: fe80::225:90ff:fede:1f0b/64 Scope:Link 
           UP BROADCAST RUNNING MULTICAST    MTU:1500    Metric:1 
           RX packets:10066 errors:0 dropped:37 overruns:0 frame:0 
           TX packets:2580 errors:0 dropped:0 overruns:0 carrier:0 
           collisions:0 txqueuelen:1000 
           RX bytes:963821 (963.8 KB)    TX bytes:339164 (339.1 KB) 
           Interrupt:20 Memory:dfb00000-dfb20000 

 lo          Link encap:Local Loopback 
           inet addr:127.0.0.1    Mask:255.0.0.0 
           inet6 addr: ::1/128 Scope:Host 
           UP LOOPBACK RUNNING    MTU:65536    Metric:1 
           RX packets:32 errors:0 dropped:0 overruns:0 frame:0 
           TX packets:32 errors:0 dropped:0 overruns:0 carrier:0 
           collisions:0 txqueuelen:0 
           RX bytes:2392 (2.3 KB)    TX bytes:2392 (2.3 KB) 
 </pre>

Back