[Oisf-users] Is is possible to restart suricata with zero drops when suricata-IPS crashes

[Peter Manev]

> On 19 Nov 2018, at 06:39, kavi perumal <kaviperumal22 at gmail.com> wrote:
> 
> Hi,
> 
> When running suricata in IDS (or) IPS mode in data path, when there is a crash/failure in suricata, is it possible to restart suricata with zero packet drops?
> 

Can you share any info of how it crashes/fails ?


> (or) any way to bypass the traffic until suricata gets restarted?
> 
> Regards
> -Kavi Perumal G.
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> 
> Conference: https://suricon.net
> Trainings: https://suricata-ids.org/training/