E :af-packet: fanout not supported by kernel: Kernel too old or cluster-id 99 already in use

Help
1
  • Suricata version : This is Suricata version 7.0.3 RELEASE
  • Ubuntu 24.04 LTS
  • How you installed Suricata : i nstalled it with these commands
    sudo apt-get install software-properties-common
    sudo add-apt-repository ppa:oisf/suricata-stable
    sudo apt update
    sudo apt install suricata jq

i am getting this error while configuration if it will be needed i can share my suricate.yaml file

Thank you for your time.

2

Share your suricata.yaml an dalso the suricata.log and also the run command.

3

Command that is used sudo suricata -c /etc/suricata/suricata.yaml -i ens18

i have copied .log and .yaml to txt

4

What type of CPU is this?
What kernel version?
Did you ensure that there is no other process running that uses the same cluster-id? Maybe even a second Suricata instance running?
Otherwise try other numbers for the cluster-id

5

Sorry for taking your time somehow i manage to fix it with ai . i purged it , reinstalled and
reconfigured it.