Suricata 5.0.3 in IPS mode for DoS

image

i test hping3 to suricata IPS on Ubuntu
configuration at my iptables on suricata:

sudo iptables -I FORWARD -j NFQUEUE
sudo iptables -I INPUT -p tcp  -j NFQUEUE
sudo iptables -I OUTPUT -p tcp -j NFQUEUE

i capture network traffic with wireshark at suricata IPS on Ubuntu