suricata.exe -c suricata.yaml -i 192.168.3.239 -l D:\tools\Suricata\log --windivert true -v -k none --run autofp
Info: win32-service: Running as service: no
Info: suricata: translated 192.168.3.239 to pcap device \Device\NPF_{0D2E48CE-4BF1-4B05-8743-5D218603D973}
Error: suricata: more than one run mode has been specified
Suricata 7.0.5
When I remove the “-i 192.168.3.239” option, an error occurs.
Info: detect: 0 signatures processed. 0 are IP-only rules, 0 are inspecting packet payload, 0 inspect application layer, 0 are decoder event only
Info: win32-syscall: Obtaining offload state failed, device “VirtualBox Host-Only Ethernet Adapter” may not support offload. Error: 0x80041001
Info: win32-syscall: Obtaining offload state failed, device “VPN Client Adapter - VPN” may not support offload. Error: 0x80041001
Info: win32-syscall: Obtaining offload state failed, device “Bluetooth Device (Personal Area Network)” may not support offload. Error: 0x80041001
Info: win32-syscall: Obtaining offload state failed, device “Software Loopback Interface 1” may not support offload. Error: 0x80041002
Warning: suricata: setrlimit unavailable.
Notice: threads: Threads created → RX: 1 W: 12 TX: 1 FM: 1 FR: 1 Engine started.
Error: windivert: WinDivertOpen failed, error 1232 (0x000004d0): 不能访问网络位置。有关网络排除故障的信息,请参阅 Windows 帮助。 This error occurs when an impostor packet (with pAddr->Impostor set to 1) is injected and the ip.TTL or ipv6.HopLimit field goes to zero. This is a defense of last resort against infinite loops caused by impostor packets.
Error: threads: thread TX#00 failed
How can I fix this to make it work properly?