After suricata is setup and running, if I change the rules and click on apply
under Rules, suricata loads rules twice, didnt do it the first time, but did
the second time and thereafter, I waited for rule reload complete before making
any other changes. Note, 24.7.3 opnsense corrected itself once, older versions
always reloaded twice after a rule change. Any ideas?
Ok give it enough time and it corrects itself
What I think is happening
Suricata has more than one engine
Another engine is running while one engine is doing a rule reload, they sync and one takes over
The reason it didnt correct in older versions is because I pushed to many buttons to fast
and to many times without giving it time to finish its work, and that messed up its software