Alerts now not showing - previously working fine!

[eponymous]

Hi,

OPNsense 21.7.7

I've got Suricata running in IPS mode on the WAN. The WAN is a PPPoE interface if that's helpful.

Alerts were working perfectly until recently on both the Alerts GUI tab and to my Syslog server - now I don't get either but I've confirmed with a test on targeting one of the rules that Suricata itself is running and working.

Any ideas why the alerts have stopped showing?

[eponymous]

Ok now I'm confused. This was working just fine but now it refuses to drop at all.

I've been doing more reading and see there are issues with running Suricata inline IPS on a WAN interface that uses PPPoE.

Is this still the case and is there any plans for support in the works?

[RamSense]

is this already solved for you?