Hi everyone,
I set up af-packet section according to 13. Setting up IPS/inline for Linux — Suricata 7.0.0-rc1-dev documentation .When I run suricata it gave errors. The errors are
“”"
[643279] 11/1/2023 – 11:39:05 - (source-af-packet.c:479) (AFPPeersListCheck) – [ERRCODE: SC_ERR_AFP_CREATE(190)] - Threads number not equals
[643279] 11/1/2023 – 11:39:05 - (runmode-af-packet.c:890) (RunModeIdsAFPWorkers) – [ERRCODE: SC_ERR_FATAL(171)] - Some IPS capture threads did not peer.
“”"
Any help would be great. Best regards,
This is af-packet section configuration.
- interface: eth0
threads: 1
defrag: yes
cluster-type: cluster_flow
cluster-id: 98
copy-mode: ips
copy-iface: eth1
buffer-size: 64535
use-mmap: yes- interface: eth1
threads: 1
cluster-id: 97
defrag: yes
cluster-type: cluster_flow
copy-mode: ips
copy-iface: eth0
buffer-size: 64535
use-mmap: yes
- interface: eth1