• abhi

    • Post #1
    • Edited

    Hi,

    Getting the following errors from the probe log when I tried to start Trisul from the UI.

    "/domain0/probe0/context0/config/TRISULCONFIG.SQDB^[[m
    ^[[34mFri Feb 28 12:03:58 2025.293049 INFO [FilterNetPcap-0] libpcap dyn library version libpcap version 1.9.0-PRE-GIT (with TPACKET_V3)^[[m
    ^[[32mFri Feb 28 12:03:58 2025.293067 DEBUG Opening and registering adapter 0 eno1^[[m
    ^[[31mFri Feb 28 12:03:58 2025.294849 ERROR Unable to open the adapter. eno1 : Err = eno1: You don't have permission to capture on that device (socket: Operation not permitted)^[[m
    ^[[1;31mFri Feb 28 12:03:58 2025.294892 FATAL Quitting ! Could not setup adapter for capture. Check permissions ^[[m
    ^[[1;31mFri Feb 28 12:03:58 2025.294977 FATAL Unable to create processing engine : An adapter could not be setup^[[m
    ^[[31mFri Feb 28 12:03:58 2025.294999 ALERT Error : Pulse Server Failed to initialize, Quitting!^[[m
    ^["

      Hello,

      Trisul unable to open the network adapter eno1 due to insufficient permissions. This is likely because the trisul process does not have the necessary privileges to capture packets.

      The solution is

      • Set sticky bit on Trisul Executable using following command
        sudo chmod +s /usr/bin/trisul
        and start the Trisul from UI

      After applying these fixes, .Let me know if you need further help!

        Write a Reply...