Unfortunately, I’m facing the same problem.
Suricata running in a VM on proxmox in af-packet mode.
I can choose between “Intel E1000”, “VirtIO (paravirtualized)”, Realtek RTL8139" and “VMware vmxnet3” network cards. None of them activates the bridge mode in a way that handshakes are possible.
Is there any further idea how to cope with this?
Kind regards,