How to use suricata offline

Help
2

You can pass a pcap via -r file.pcap to run in pcap mode. In addition to that you can use unix socket, see 20. Interacting via Unix Socket — Suricata 6.0.1 documentation