Suricata can't get logs from another range ip

1

Hello team,
Im newbie
I just set up Suricata as IDS
here is my Lab

image
image1127×572 53.5 KB

I want to get logs from 192.168.13.12 to 192.168.15.11
When I try to ping from 192.168.13.12 to 192.168.15.11
But When I try ping 192.168.15.12 to 192.168.13.12
it’s got log normal

image
image1011×163 34.4 KB

it’s know each other but In suricata logs I didn’t see anything

image
image1012×132 35.1 KB

If I configuration wrong please guide me how to configure
Best regards,

2

Did you configure packet mirroring or forwarding of the packets to the Suricata instance on the switches? Otherwise Suricata won’t see those packets at all.

Also share your suricata.yaml and how you run Suricata.

3

I have the same problem for the ip only suricata ip but packets from other ip are read, but the destination ip does not change.