26.7.3_11 Intrusion detection (suricata)

Started by hit0x, September 07, 2026, 01:01:16 PM

Previous topic - Next topic
September 07, 2026, 01:01:16 PM Last Edit: September 07, 2026, 01:14:18 PM by hit0x
Hi, after upgrading from 26.7.2 to 26.7.3_11 (the latest release) I have found a problem with Suricata in netmap mode.

<Error> -- opening devname netmap:vlan0.999/R failed: Invalid argument

If I use another interface, such as PPPoE or a physical one, it starts up without any problems, it seems to be related to the VLANs. I'm not sure if it's a syntax issue (dot) I think something similar happened years ago

It seems the problem was with the MTU; one of the VLANs has it set to 9000 and the physical interface does not automatically adjust to the maximum required (shared by all VLANs with Suricata active)

I've set the value manually and it's working fine; this thread can now be closed

My fault ;)