IPS Stopped SC_ERR_NFQ_OPEN(68)

IPFIRE 2.25 Core Update 146

IPS GUI shows in stopped state

When we manually restart this is what we get

[root@ipfire ~]# /etc/init.d/suricata restart
Stopping Intrusion Detection System…
/etc/rc.d/init.d/functions: line 366: k Not running.No such process [ WARN ]
Starting Intrusion Detection System… [ OK ]
iptables v1.8.3 (legacy): unknown option “–queue-bypass”
Try iptables -h' or 'iptables --help' for more information. iptables v1.8.3 (legacy): unknown option "--queue-bypass" Try iptables -h’ or ‘iptables --help’ for more information.
iptables v1.8.3 (legacy): unknown option “–queue-bypass”
Try `iptables -h’ or ‘iptables --help’ for more information.
[root@ipfire ~]#

The logs show:
[root@ipfire ~]# grep suricata /var/log/messages^C
[root@ipfire ~]# tail -f /var/log/messages|grep suricata
Aug 13 15:51:02 ipfire suricata: Signal Received. Stopping engine.
Aug 13 15:51:04 ipfire suricata: Stats for ‘red0’: pkts: 113860, drop: 0 (0.00%), invalid chksum: 0
Aug 13 15:51:17 ipfire suricata: This is Suricata version 5.0.3 RELEASE running in SYSTEM mode
Aug 13 15:51:17 ipfire suricata: [ERRCODE: SC_WARN_NO_STATS_LOGGERS(261)] - stats are enabled but no loggers are active
Aug 13 15:51:17 ipfire suricata: [ERRCODE: SC_ERR_NFQ_OPEN(68)] - nfq_open() failed
Aug 13 15:51:17 ipfire suricata: [ERRCODE: SC_ERR_NFQ_THREAD_INIT(78)] - nfq thread failed to initialize

Any help on this would be great.

Is the correct kernel is running?
(uname -a)

1 Like

Linux ipfire 3.14.65-ipfire #1 SMP Fri Apr 1 13:53:23 GMT 2016 i686 AMD Opteron 62xx class CPU AuthenticAMD GNU/Linux

Resolved by performing an update

1 Like