Project

General

Profile

Actions
Copy link

Bug #2403

closed

Crash for offline pcap mode when running in single mode

Added by Maurizio Abba almost 7 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Maurizio Abba
Target version:
4.1beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Suricata fails initialization when running in pcap mode with single runmode.

To reproduce, just run suricata with flag option --pcap and configuration

pcap:
- interface: eth1

This is just an example.

The bug is in function RunModeSetLiveCaptureSingle (from util-runmodes.c).
The configuration must be parsed after LiveGetDeviceName returned the interface for live_dev_c, not before. Switching the lines solve the bug.

Actions
Copy link

Also available in: Atom PDF