squid:alerts:suricata_udpv4_invalid_checksum
This is an old revision of the document!
Squid - Alerts - SURICATA UDPv4 invalid checksum
Disable Hardware Checksum Offloading under System → Advanced → Networking.
NOTE: Try toggling the Hardware Checksum Offloading.
If that does not do it, you can simply disable that particular rule by either clicking the red X icon on the Alerts tab in the GID/SID column, or you can find and selectively disable that rule on the Rules tab for the interface.
See this thread from the official Suricata documentation Wiki for details:
Suricata uses PCAP for packet capture during Legacy Blocking Mode operation, and Netmap for Inline IPS Mode operation.
In both cases, hardware checksum offloading needs to be disabled.
squid/alerts/suricata_udpv4_invalid_checksum.1609790922.txt.gz · Last modified: 2021/01/04 20:08 by peter