OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: olest on June 18, 2019, 02:36:26 pm

Title: [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Post by: olest on June 18, 2019, 02:36:26 pm

Why do I get this error?

Jun 18 14:35:14   suricata: [100388] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 14:35:13   suricata: [100121] <Notice> -- Signal Received. Stopping engine.

Title: Re: [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Post by: olest on June 18, 2019, 08:34:48 pm

Get many of these errors:
Jun 18 19:36:05   suricata: [100259] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:05   suricata: [100257] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:05   suricata: [100260] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:05   suricata: [100258] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:05   suricata: [100124] <Notice> -- rule reload complete
Jun 18 19:36:05   suricata: [100261] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100257] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100259] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100260] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100260] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100258] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2

Title: Re: [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Post by: olest on June 18, 2019, 10:07:18 pm

My fault - had selected VLAN interface...

Title: Re: [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Post by: patcsy88 on September 14, 2019, 02:33:58 am

With physical interface I get the same error - any ideas?

Title: Re: [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Post by: franco on September 24, 2019, 03:54:20 pm

https://suricata-ids.org/2019/09/24/suricata-4-1-5-released/

Specifically:

Bug #3159: SC_ERR_PCAP_DISPATCH with message “error code -2” upon rule reload completion (4.1.x)

It's often useful to report bugs upstream. ;)


Cheers,
Franco

Title: Re: [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Post by: dcol on October 07, 2019, 11:54:14 pm

Quite a few bugs fixed with Suricata 4.1.5. I would like to see it added to the next update.