Do the network interfaces have to have the same network addresses to work?

Help
1

Please include the following information with your help request:

  • Suricata version 8.0.0
  • Operating system and/or Linux distribution ubuntu 23.10
  • How you installed Suricata (from source, packages, something else)
    with the github repo

hello , i want to install suricata with ips mode on my virtual private server fo web application. Basically I only have a network interface because an interface.Then i create a virtual interface with: sudo ip link add suricata type dummy sudo ip link set suricata up

and then, and I find myself with an interface without public ip address, with ipv6 local adress only , what can i do ?
I think from what I read that you need two network interfaces for the ips mode with --af-packet

2

In that case it might make more sense to do it with NFQUEUE as described in 15. Setting up IPS/inline for Linux — Suricata 8.0.0-dev documentation