>> This looks strange - for 5hrs your stats seem very low..... How much traffic are you inspecting ? Hi Peter. I believe I found the problem. And has nothing to do with Suricata. But your sentence "This looks strange" triggered my brain to think elsewhere. I will confirm this latter on. I will need to do some more tests. Thanks a lot, Pedro