hello ,
i’ve wrong configuration with --af-packet mode cause this :
af-packet:
- interface: ens33
threads: 12
defrag: yes
cluster-type: cluster_flow
cluster-id: 98
copy-mode: ips
copy-iface: ens37
buffer-size: 64535
use-mmap: yes
- interface: ens37
threads: 12
cluster-id: 97
defrag: yes
cluster-type: cluster_flow
copy-mode: ips
copy-iface: ens33
buffer-size: 64535
use-mmap: yes
but why ?Putting the configuration on top will keep my connection to the websites in supend mode, but if I switch to NFC mode, I won’t have any problems.
i’v this too:
run-as:
user: suricata
group: suricata
```, and this
regards