# Can we run suricata in IDS mode with NFQ support

**URL:** <https://forum.suricata.io/t/can-we-run-suricata-in-ids-mode-with-nfq-support/5062>\
**Category:** Help\
**Tags:** community, suricata\
**Created:** [November 25, 2024, 12:28pm UTC](https://forum.suricata.io/t/can-we-run-suricata-in-ids-mode-with-nfq-support/5062 "2024-11-25T12:28:09Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dinesh](https://avatars.discourse-cdn.com/v4/letter/d/a8b319/32.png) [@dinesh](https://forum.suricata.io/u/dinesh)\
**Post date:** [November 25, 2024, 12:28pm UTC](https://forum.suricata.io/t/can-we-run-suricata-in-ids-mode-with-nfq-support/5062/1 "2024-11-25T12:28:09Z")

</div>

> Please include the following information with your help request:
> 
> - Suricata version
> - Operating system and/or Linux distribution
> - How you installed Suricata (from source, packages, something else)

Hi,

Suricata version - 7.0.7  
Operating System - Ubuntu 22.04  
Installed suricata from a package.

I have a requirement to run suricata with nfq in ids mode.  
I am running suricata with --simulate-ips option in command line to run in IPS mode.  
Without this option (–simulate-ips) if we run suricata with “suricata -Dc /etc/suricata/suricata.yaml -q 0” and action as drop it should not drop.  
Can anyone suggest how we can run suricata with IDS in nfq support.

Thanks in advance for helping.

---

<div class="post-metadata">

**Author:** ![Andreas\_Herz](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/andreas_herz/32/52_2.png) [@Andreas\_Herz](https://forum.suricata.io/u/Andreas_Herz)\
**Post date:** [February 12, 2025, 9:01pm UTC](https://forum.suricata.io/t/can-we-run-suricata-in-ids-mode-with-nfq-support/5062/2 "2025-02-12T21:01:17Z")

</div>

Can you share your `suricata.yaml` config and how you run Suricata? Ideally also at `stats.log` and `suricata.log`.