Nfq_create_queue failed

Help
1

Ubuntu16.04
I have a Virtual Ethernet Adapter named vmnet1 which ip is 192.168.56.1.
iptables:
sudo iptables -t nat -A POSTROUTING -o ens33 -s 192.168.56.0/24-j MASQUERADE（i use host-only go internet）
iptables -I FORWARD -j NFQUEUE
when i start suricata(IPS),it will faill.like this:

企业微信截图_20200522182008
企业微信截图_202005221820081457×101 41.5 KB

2

why ? thank you very much.

3

2 things come to mind:

  • permissions: does it work when you start as root or using sudo?
  • queue is busy: another program is already using queue 0
4

i use sudo.
which program would use queue 0?
is this rule affect?
nat:-A POSTROUTING -s 192.168.56.0/24 -o ens33 -j MASQUERADE

5 
# cat /proc/net/netfilter/nfnetlink_queue
    0   1169     0 2 65531     0     0  8593079  1

Here the 1169 is the process id of the process using queue 0.

6

I find another suricata(daemon) is running ，my fault.
thank you