Suricata stopped logging on external IFs



  • Yesterday, after reading some articles of the fascinating new abilities of Snort, stupid me went ahead, installed it and deleted Suricata. Snort didn't quite worked as advertised; no prob, I didn't clear Suricata's settings, everything weill be there are reinstall. I thought.

    Well…it was and now it isn't. I now have Suricata sort of working again except that's only displaying logs in the internal interfaces; the ones that connect outside are completely blank.

    Any idea what did I eff up? I do have a backup but it's older than I'd like to be, I'm avoiding using it. :/