PPPoE Suricata log flodding

Started by iam, July 18, 2019, 06:05:21 PM

Previous topic - Next topic
July 18, 2019, 06:05:21 PM Last Edit: July 18, 2019, 06:13:53 PM by iam
Hi,

yesterday I've updated to 19.7.0. Now there are a lot of messages in the Suricata log:
suricata: [100294] <Error> -- [ERRCODE: SC_ERR_NETMAP_READ(264)] - Error reading data from iface 'pppoe0': (55u) No buffer space available

Cheers,
iam

Hello,

I am using version OPNsense 19.7.5_5-amd64 and I am seeing the same behavior as you, lots of messages like that:

Oct 23 17:15:20   suricata: [100176] <Error> -- [ERRCODE: SC_ERR_NETMAP_READ(264)] - Error reading data from iface 'pppoe1': (55u) No buffer space available
Oct 23 17:15:20   suricata: [100176] <Error> -- [ERRCODE: SC_ERR_NETMAP_READ(264)] - Error reading data from iface 'pppoe1': (55u) No buffer space available
Oct 23 17:15:20   suricata: [100176] <Error> -- [ERRCODE: SC_ERR_NETMAP_READ(264)] - Error reading data from iface 'pppoe1': (55u) No buffer space available

Best regards,
Andre

Hello,
I receved today a similar error:
suricata[27960]: [100285] <Error> -- [ERRCODE: SC_ERR_NETMAP_READ(264)] - Error reading data from iface 'pppoe0': (55u) No buffer space available

Any help would be appreciated
Thanks

It also happens to me on regular basis on three 19.7 instances. When this occurs, internet access, webui and ssh access can't be done.

Were any of you able to find a solution to this issue?

IPS mode isn't supported on ppp type interfaces, more information can be found in this thread https://forum.opnsense.org/index.php?topic=9741.0