suricata: Start capture first and then load rules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
This commit is contained in:
Michael Tremer
2019-02-28 14:28:24 +00:00
committed by Stefan Schantl
parent 890f1bf295
commit 99d75ac72e

View File

@@ -698,9 +698,10 @@ detect:
toserver-groups: 25
sgh-mpm-context: auto
inspection-recursion-limit: 3000
# If set to yes, the loading of signatures will be made after the capture
# is started. This will limit the downtime in IPS mode.
#delayed-detect: yes
delayed-detect: yes
prefilter:
# default prefiltering setting. "mpm" only creates MPM/fast_pattern