- Suricata version suricata -V v1.0.5
- Operating system and/or Linux distribution: openEuler 24.03 lts
- How you installed Suricata (from source)
I run suricata with –pcap-file-continuous. When I test an out-of-oder ftp-data.pcap, I find the fileinfo event won’t appear until stop process. The flowmanager won’t handle timeout flow because it is running in offlinemode.
