Suricata: There were error(s) loading the rules



  • I've updated suricata to version 4.0.4_1.
    Since this update, I'm getting this error:

    There were error(s) loading the rules: /tmp/rules.debug:21: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [21]: table <bogonsv6> persist file "/etc/bogonsv6"
    @ 2018-04-02 09:22:23

    I've never encountered any rule loading problems with previous versions

    any suggestions?

    thanks



  • This is not a Suricata error.  This is a pfSense error.  You have other problems not related to Suricata.

    Bill



  • Thank you for this.

    In this article (https://forum.pfsense.org/index.php?topic=50141.0), the problem is explained. I increased the value of System/Advanced/Firewall & NAT/Firewall Maximum Table Entries to 400000.The default value was 200000.

    The description for this field is: Maximum number of table entries for systems such as aliases, sshlockout, snort, etc, combined.
    Since it mentions snort, I assume using suricata also impacts the number of table entries. It is however a system setting, so Bill's remark is correct.

    The error didn't appear anymore after the value was increased.


Log in to reply