Suricata doesn't detect nmap scan

1

Hi guys,
I have a problem: I have installed Suricata on my server and set the Emergency Threats Open rules, and I am trying to perform scans on this server using nmap, even in aggressive mode with the -A option, but Suricata does not detect them. Is this normal? Could there be another specific set of rules to detect this type of nmap scans? Or did I do something wrong? I should mention that if I try to reinstall the rules, the system informs me that they are already installed, and anyway, if I perform get operations with the curl command, it detects those.

Thank you for reply.

2

Did you check if you enabled signatures related to scans?
In general simple scans are not considered a relevant security risk, so not a big focus on detecting them.