After I mount a device on /data/nsm which is the dir of pcaps,the suricata.log shows: Error opening dump file /data/nsm//log.11.2015843215.pcap:Permission denied. I run ‘chmod -R /data/nsm’ to change the permission but it does not work. How can I fix it?

Anything in that folder StatsByDate can be deleted. The information there is more for record keeping.

Somethin is wrong with suricata

jufajardini (Ju Fajardini) September 29, 2021, 6:18pm 7

I see now! Sorry, yeah, I had misunderstood you.

Suricata.yaml offers config options to define with user and group should execute it. This post here offers some aid in dealing with Permission denied issues, maybe it can help you?

Topic		Replies	Views
Suricata crashes when suricata.yaml setting max-file to 1 in pcap-log config Help suricata	4	332	September 13, 2023
Can't ingest pcap Help	12	1689	August 25, 2021
When using --pcap-file-continuous suricata saves to the wrong place Help suricata	3	226	July 31, 2024
ERROR: Pcap file does not exist Help	13	2246	October 15, 2021
[ERRCODE: SC_ERR_FOPEN(44)] - Error opening file: "C:\\Program Files\\Suricata\\log/fast.log": Permission denied Help suricata	4	2315	February 15, 2023

Somethin is wrong with suricata

Related topics