@Chelito4 Hello! Please, take a look on point 2. You've mentioned in #19202 (comment) , that solved, Please, put a hint how it was solved. Thank you!

@Chelito4 Hello! Please, take a look on point 2. You've mentioned in #19202 (comment) , that solved, Please, put a hint how it was solved. Thank you!

Hi Mikhail i solved it by installing as an maltrail as application not in a container.

@Chelito4 Hello! Please, take a look on point 2. You've mentioned in #19202 (comment) , that solved, Please, put a hint how it was solved. Thank you!

Hi Mikhail i solved it by installing as an maltrail as application not in a container.

OK, thank you for the info!

@gabrielbasetti you are most probably running it wrong. please post your "Dockerfile" here

also, I don't see what does the UDP_ADDRESS have to do with that error. have you tried to run your maltrail configuration file (with maltrail) outside of the Docker container?

in #19202, guy said "I solved", so I guess that in your case you should try to properly configure environment too? We have zero useful information here

p.s.:

you can try the following:

instead of (https://github.com/stamparm/maltrail/blob/master/sensor.py#L1305-L1307):

    except IOError:
        log_error("\n\n[!] session abruptly terminated\n[?] (hint: \"https://stackoverflow.com/a/20997655\")")
        code = 1

use

    except IOError as err:
        log_error("\n\n[!] session abruptly terminated\n[?] (%s)" % err)
        code = 1

Thank you very much for your help.
I have found the problem.
I was trying to configure the multi-sensor feature with containers and was blaming docker and NAT, but the problem was that the container where the server is, was not receiving information on udp port 8337
The command to run the container does not expose port 8337 correctly, as it should be UDP and not TCP.

docker run -d --name maltrail-docker --privileged -p 8337:8337/udp -p 8338:8338 -v /var/log/maltrail/:/var/log/maltrail/ maltrail

The command to run the container does not expose port 8337 correctly, as it should be UDP and not TCP.

437fd5d