<div dir="ltr">Hi, <div>I didn't face any crash/fail till now, just a design thought for our deployment.</div><div>Regards</div><div>-Kavi Perumal G.</div></div><br><div class="gmail_quote"><div dir="ltr">On Mon, Nov 19, 2018 at 2:20 PM Peter Manev <<a href="mailto:petermanev@gmail.com">petermanev@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
> On 19 Nov 2018, at 06:39, kavi perumal <<a href="mailto:kaviperumal22@gmail.com" target="_blank">kaviperumal22@gmail.com</a>> wrote:<br>
> <br>
> Hi,<br>
> <br>
> When running suricata in IDS (or) IPS mode in data path, when there is a crash/failure in suricata, is it possible to restart suricata with zero packet drops?<br>
> <br>
<br>
Can you share any info of how it crashes/fails ?<br>
<br>
<br>
> (or) any way to bypass the traffic until suricata gets restarted?<br>
> <br>
> Regards<br>
> -Kavi Perumal G.<br>
> _______________________________________________<br>
> Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org" target="_blank">oisf-users@openinfosecfoundation.org</a><br>
> Site: <a href="http://suricata-ids.org" rel="noreferrer" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" rel="noreferrer" target="_blank">http://suricata-ids.org/support/</a><br>
> List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="noreferrer" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
> <br>
> Conference: <a href="https://suricon.net" rel="noreferrer" target="_blank">https://suricon.net</a><br>
> Trainings: <a href="https://suricata-ids.org/training/" rel="noreferrer" target="_blank">https://suricata-ids.org/training/</a><br>
</blockquote></div>