CindyStudyEveryday

Thank you! The output is here,it semms something wrong with the interface and block size. The output of "ip addr" shows two interfaces,lo and enp0s3 root@SELKS :/opt/selks/log# tail -20 /var/log/suricata/suricata...

In this file : /etc/suricata/suricata.yaml in line 579-580 shows: af-packet: -interfaces:eth0 but the output of "ip addr/ifconfig" shows two interfaces,lo and enp0s3.So how could I handle with this problem?

I had the same problem. Did you solve it later? If so, could you tell me how？

Yes，it has. [2848] 30/ 1/ 2022 -- 03:39:58 - (util-pidfile.c:133) (SCPidfileTestRunning) - [ERRCODE: SC_ ERR_INITIALIZATION(45)] - pid file ' /var/ run/suricata.pid' exists but appears stale. Make sure Suricatas not running...

It turns into active(running) for only a few seconds,then turn back to active(exited). The error towards the end of the suricata.log is the same. /var/ run/suricata.pid appears again.

Here's the output. root 690 0.3 0.0 50764 92 ? S 05:34 0:02 /usr/bin/python /usr/sbin/suri_reloader -p /etc/suricata/rules -l /var/log/suri-reload.log -D root 1825 0.0 0.0 6208 804 pts/0 S+ 05:44 0:00...

- All of the previous output is the result of switching to the root user. - I tried using selks-user,use sudo and try again,suricata also turned into active(running) for only...

okok [1494] 30/1/2022 -- 08:40:12 - (log-pcap.c:1427) (PcapLogInitCtx) -- using multi logging [1494] 30/1/2022 -- 08:40:12 - (util-logopenfile.c:474) (SCConfLogOpenGeneric) -- stats output device (regular) initialized: stats.log [1494] 30/1/2022 -- 08:40:12...

To enable th evirtual machine system to connect to the Internet, I added some lines to '/etc/network/interfaces'. The following is what i add and is based on the host address....

There's no change for this file.