Since Jan 28th the Intrusion Detection service of my opnsense install has been 'crashing'.
I can find the error below being repeated since. No idea what I did on Jan 28th or if I did anything to cause this.
2022-03-03T12:22:19 Error suricata [101865] <Error> -- [ERRCODE: SC_ERR_NETMAP_CREATE(263)] - opening devname netmap:vtnet4/R failed: Invalid argument
2022-03-03T12:21:09 Notice suricata [100250] <Notice> -- This is Suricata version 6.0.4 RELEASE running in SYSTEM mode
vtnet4 is one of my interfaces, but how do I go about figuring out what is going wrong here?
I can start the service, but a minute later it stops again.
anyone?
unless you are doing https interception you aren't seeing anything but noise. ips is guessing based on source IP..that's it. I would turn off and uninstall ips and save the headache.