Suricata failed to start [SOLVED]

Post Reply
zemerdon
Site Admin
Posts: 255
Joined: Mon Jan 23, 2023 8:13 pm

Suricata failed to start [SOLVED]

Post by zemerdon »

Errors:

25/9/2023 -- 15:08:38 - <Info> -- running in 'auto' checksum mode. Detection of interface state will require 1000ULL packets
25/9/2023 -- 15:08:38 - <Info> -- Set snaplen to 1518 for 'pppoe1'
25/9/2023 -- 15:08:38 - <Error> -- [ERRCODE: SC_ERR_POOL_INIT(66)] - alloc error
25/9/2023 -- 15:08:38 - <Error> -- [ERRCODE: SC_ERR_POOL_INIT(66)] - pool grow failed
25/9/2023 -- 15:08:38 - <Error> -- [ERRCODE: SC_ERR_MEM_ALLOC(1)] - failed to setup/expand stream session pool. Expand stream.memcap?

Solution:

** add more memory allocation in Suricata. (add a 0 to the default value)

Services -> Suricata -> Interface Settings -> WAN - Flow and Stream Engine

Fragmentation Memory Cap = 335544320
Flow Manager Settings = 335544320
Stream Engine Settings = 1312177280
Post Reply