<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Suricata 7.0.8_5 on pfsense 2.8.1 hangs after enabling [SOLVED]]]></title><description><![CDATA[<p dir="auto">Wanted to test Suricata with a basic config<br />
Suricata 7.0.8_5 on pfsense 2.8.1 internet and network hangs after enabling, unbound service stops, ISC DHCP Server stops. I have to disable Suricata and reboot to fix it.</p>
<p dir="auto">Cannot seem to find the logs that shows what the issue is.</p>
<p dir="auto"><strong>Services Suricata Global Settings</strong><br />
ETOpen is a free open source set of Suricata rules whose coverage is more limited than ETPro. - Checked<br />
Use a custom URL for ETOpen downloads - Checked<br />
Install Feodo Tracker Botnet C2 IP rules  - Checked<br />
Install ABUSE.ch SSL Blacklist rules  - Checked</p>
<p dir="auto">ETOpen Custom Rule Download URL<br />
https://rules.emergingthreats.net/open/suricata-7.0.8/emerging.rules.tar.gz</p>
<p dir="auto"><strong>Services Suricata LAN - Interface Settings</strong><br />
Interface LAN<br />
Alert and Block Settings - Unchecked (doing IDS-only atm)</p>
<p dir="auto">Services Suricata Interface Settings LAN - Categories</p>
<p dir="auto">ONLY 	Feodo Tracker Botnet C2 IP Rules is checked</p>
<p dir="auto">AMD Ryzen 5 5600G with Radeon Graphics<br />
12 CPUs : 1 package(s) x 6 core(s) x 2 hardware threads<br />
AES-NI CPU Crypto: Yes (active)<br />
QAT Crypto: No<br />
Memory 16GB memory<br />
Ethernet Controller 10-Gigabit X540-AT2</p>
<p dir="auto">Hardware Checksum Offloading - Unchecked<br />
Hardware TCP Segmentation Offloading - Unchecked<br />
Hardware Large Receive Offloading - Unchecked<br />
hn ALTQ support - Checked</p>
<p dir="auto">I did leave it for 10 mins but the network was still down, not sure what i am doing wrong.</p>
]]></description><link>https://forum.netgate.com/topic/200368/suricata-7.0.8_5-on-pfsense-2.8.1-hangs-after-enabling-solved</link><generator>RSS for Node</generator><lastBuildDate>Sat, 17 Oct 2026 09:19:11 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/200368.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 16 Mar 2026 10:59:28 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Suricata 7.0.8_5 on pfsense 2.8.1 hangs after enabling [SOLVED] on Tue, 11 Aug 2026 13:41:27 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/ageekhere">@<bdi>aGeekhere</bdi></a> said in <a href="/post/1246504">Suricata 7.0.8_5 on pfsense 2.8.1 hangs after enabling [SOLVED]</a>:</p>
<blockquote>
<p dir="auto">Found the issue, rookie mistake,<br />
Hardware Checksum Offloading,<br />
Hardware TCP Segmentation Offloading,<br />
Hardware Large Receive Offloading<br />
Where not checked so they were enabled, forgot to check these to disable them.</p>
</blockquote>
<p dir="auto">Glad you found the issue. I could not remember off the top of my head whether "unchecked" was enabled or disabled for those parameters, so sorry I missed that in my previous reply.</p>
]]></description><link>https://forum.netgate.com/post/1246522</link><guid isPermaLink="true">https://forum.netgate.com/post/1246522</guid><dc:creator><![CDATA[bmeeks]]></dc:creator><pubDate>Tue, 11 Aug 2026 13:41:27 GMT</pubDate></item><item><title><![CDATA[Reply to Suricata 7.0.8_5 on pfsense 2.8.1 hangs after enabling [SOLVED] on Tue, 11 Aug 2026 00:33:30 GMT]]></title><description><![CDATA[<p dir="auto">Found the issue, rookie mistake,<br />
Hardware Checksum Offloading,<br />
Hardware TCP Segmentation Offloading,<br />
Hardware Large Receive Offloading<br />
Where not checked so they were enabled, forgot to check these to disable them.</p>
]]></description><link>https://forum.netgate.com/post/1246504</link><guid isPermaLink="true">https://forum.netgate.com/post/1246504</guid><dc:creator><![CDATA[aGeekhere]]></dc:creator><pubDate>Tue, 11 Aug 2026 00:33:30 GMT</pubDate></item><item><title><![CDATA[Reply to Suricata 7.0.8_5 on pfsense 2.8.1 hangs after enabling [SOLVED] on Sun, 09 Aug 2026 12:29:20 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/bmeeks">@<bdi>bmeeks</bdi></a> Will have a look through my settings and report back</p>
]]></description><link>https://forum.netgate.com/post/1246372</link><guid isPermaLink="true">https://forum.netgate.com/post/1246372</guid><dc:creator><![CDATA[aGeekhere]]></dc:creator><pubDate>Sun, 09 Aug 2026 12:29:20 GMT</pubDate></item><item><title><![CDATA[Reply to Suricata 7.0.8_5 on pfsense 2.8.1 hangs after enabling [SOLVED] on Sat, 08 Aug 2026 14:08:22 GMT]]></title><description><![CDATA[<p dir="auto">My best guess is your problem is hardware related and your specific Ethernet controller is the culprit. You problem seems specific to just your setup; otherwise, the forum would be flooded with similar messages about this issue as everyone runs <code>unbound</code> and <code>dhcpd</code> on their pfSense boxes and quite a few run Suricata.</p>
<p dir="auto">When Suricata starts up in IDS mode, the first thing it does is call the PCAP library to initiate a capture of traffic on the physical interface Suricata is configured to monitor. My educated guess is that sequence of events is disrupting the NIC driver in some manner. This would impact <code>unbound</code> and <code>dhcpd</code> because those daemons are tied to the underlying physical interface. If the network interface driver gets "stuck", then it stands to reason any other daemons bound to that interface will also experience problems.</p>
<p dir="auto">If you have a different NIC port to test (one that uses a different controller and driver), then try running Suricata there to see if it works. Also, unless you are running on a Hyper-V hypervisor, then you don't need the <code>hn</code> ALTQ support enabled.</p>
]]></description><link>https://forum.netgate.com/post/1246347</link><guid isPermaLink="true">https://forum.netgate.com/post/1246347</guid><dc:creator><![CDATA[bmeeks]]></dc:creator><pubDate>Sat, 08 Aug 2026 14:08:22 GMT</pubDate></item><item><title><![CDATA[Reply to Suricata 7.0.8_5 on pfsense 2.8.1 hangs after enabling [SOLVED] on Sat, 08 Aug 2026 06:50:25 GMT]]></title><description><![CDATA[<p dir="auto">I still have this issue, when i enable Suricata unbound and dhcpd service crashes, only a restart can fix it after disabling Suricata  and rebooting.</p>
]]></description><link>https://forum.netgate.com/post/1246328</link><guid isPermaLink="true">https://forum.netgate.com/post/1246328</guid><dc:creator><![CDATA[aGeekhere]]></dc:creator><pubDate>Sat, 08 Aug 2026 06:50:25 GMT</pubDate></item></channel></rss>