[ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2

[olest]

Why do I get this error?

Jun 18 14:35:14   suricata: [100388] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 14:35:13   suricata: [100121] <Notice> -- Signal Received. Stopping engine.

[olest]

Get many of these errors:
Jun 18 19:36:05   suricata: [100259] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:05   suricata: [100257] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:05   suricata: [100260] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:05   suricata: [100258] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:05   suricata: [100124] <Notice> -- rule reload complete
Jun 18 19:36:05   suricata: [100261] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100257] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100259] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100260] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100260] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2
Jun 18 19:36:04   suricata: [100258] <Error> -- [ERRCODE: SC_ERR_PCAP_DISPATCH(20)] - error code -2

[olest]

My fault - had selected VLAN interface...

[patcsy88]

With physical interface I get the same error - any ideas?

[franco]

https://suricata-ids.org/2019/09/24/suricata-4-1-5-released/

Specifically:

Bug #3159: SC_ERR_PCAP_DISPATCH with message “error code -2” upon rule reload completion (4.1.x)

It's often useful to report bugs upstream.


Cheers,
Franco

[dcol]

Quite a few bugs fixed with Suricata 4.1.5. I would like to see it added to the next update.