# Should suricata set timemode online when --pcap-file-continuous is appointed?

**URL:** https://forum.suricata.io/t/should-suricata-set-timemode-online-when-pcap-file-continuous-is-appointed/6119
**Category:** Help
**Tags:** suricata
**Created:** [November 27, 2025, 9:57am UTC](https://forum.suricata.io/t/should-suricata-set-timemode-online-when-pcap-file-continuous-is-appointed/6119 "2025-11-27T09:57:41Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![hlwdqs](https://avatars.discourse-cdn.com/v4/letter/h/13edae/32.png) [@hlwdqs](https://forum.suricata.io/u/hlwdqs)
#### Post date: [November 27, 2025, 9:57am UTC](https://forum.suricata.io/t/should-suricata-set-timemode-online-when-pcap-file-continuous-is-appointed/6119/1 "2025-11-27T09:57:41Z")

</div>

> - Suricata version suricata -V v1.0.5
> - Operating system and/or Linux distribution: openEuler 24.03 lts
> - How you installed Suricata (from source)

I run suricata with –pcap-file-continuous. When I test an out-of-oder ftp-data.pcap, I find the fileinfo event won’t appear until stop process. The flowmanager won’t handle timeout flow because it is running in offlinemode.

 ![image](https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/2X/0/016b9e44c75f364a6cececd06cdbb7aed54ae8f8.png)