You can use suricatasc to query the run and capture mode of suricata:
suricatasc -c capture-mode /var/run/suricata/suricata-command.socket (note that the socket name is taken from suricata.yaml (if present). Otherwise, a default value is used.