HI,
I’ve setup suricata to work with an AWS load balance to receive mirrored VPC traffic. I can see the mirrored traffic in the logs but its also adding data from the suricata host itself to the logs, which we don’t want. Is there a way stopping that behaviour?
many thanks
Darrin