On 18/12/18 at 20:47, Charles Dillard wrote: > Running suricata 3.0 on Centos 7.4 (3.10.0-862.14.4.el7.x86_64) Dell PowerEdge 720s, 730s Please update to a recent suricata verison, 3.0 is 2 years old. We improved a lot, so please test this again with suricata 4.1.1 or at least 4.0. -- Andreas Herz