I have some Suricata systems running off of taps, others off of mirror ports. Occasionally, something will happen where by we only get one side of the traffic. That is, I either see the receive traffic or the transmit traffic, but not both.
Is there a way to have Suricata alert or log something that indicates this is happening?