User Tools

Site Tools


pfsense:suricata:alerts:suricata_stream_packet_with_invalid_timestamp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
pfsense:suricata:alerts:suricata_stream_packet_with_invalid_timestamp [2021/01/14 17:18] peterpfsense:suricata:alerts:suricata_stream_packet_with_invalid_timestamp [2021/01/14 17:18] (current) peter
Line 11: Line 11:
 suppress gen_id 1, sig_id 2210044 suppress gen_id 1, sig_id 2210044
 </code> </code>
 +
 +----
 +
 +<WRAP info>
 +**NOTE:**  Try toggling the **Hardware Checksum Offloading**.
 +
 +If that does not do it, you can simply disable this particular rule by either clicking the red X icon on the **Alerts** tab in the GID/SID column, or you can find and selectively disable that rule on the **Rules** tab for the interface.
 +
 +See this thread from the official Suricata documentation Wiki for details:
 +
 +  * http://suricata.readthedocs.io/en/latest/performance/packet-capture.html.
 +
 +Suricata uses PCAP for packet capture during Legacy Blocking Mode operation, and Netmap for Inline IPS Mode operation.
 +
 +In both cases, hardware checksum offloading needs to be disabled.
 +</WRAP>
  
pfsense/suricata/alerts/suricata_stream_packet_with_invalid_timestamp.1610644685.txt.gz · Last modified: 2021/01/14 17:18 by peter

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki