Suricata does not start in IPS mode

I have configured iptables according to the instructions on NFQUEUE. then I connected the necessary rules and entered the command:

sudo suricata -c /etc/suricata/suricata.yaml -q 0

Returns an error:

14/4/2024 -- 18:30:45 - <Error> - [ERRCODE: SC_ERR_NFQ_CREATE_QUEUE(72)] - nfq_create_queue failed
14/4/2024 -- 18:30:45 - <Error> - [ERRCODE: SC_ERR_NFQ_THREAD_INIT(78)] - nfq thread failed to initialize

how do I fix it if suricata.is yaml configured correctly?


  • Suricata version: 6.0.1
  • OS: Debian Bullseye
  • I installed suricata using apt-get install suricata

problem solved
reinstall suricata…