Hi,
21.7.7 install has been running for about a week and I noticed no alerts were going to either my syslog server and the alerts gui tab. I did notice some warnings in the syslog about "flowbits checked but not set" - anything to worry about?
However main problem is I just tried restarting the system and it's currently hanging at the:
Stopping suricata.
Waiting for PIDS: 75072
I've confirmed this is the suricata PID and I can see the CPU usage is constantly at 100%.
I tried removing the WAN interface cable but it still hangs.
I don't want to pull the plug as that will risk data corruption.
I still have web access but I initiated the reboot from the console so I don't think I have any cli access.
Anything else I can try?
Ok so I got it to reboot by enabling SSH temporarily, and then doing a kill -9 on the Suricata PID. That allowed the reboot to go through. Still no idea why it was hanging though...