Suricata with LAGG - Which interface?

[chris.walker01]

Hi all,

I'm using vlans on a lagg interface.

When using VLANs, the doco says to select the physical interface (lan) in the Suricata settings. I can't see anything mentioned about what to do with LAGG interfaces though.

Both LAN and the two physical interfaces appear in the drop down list of interfaces within the Suricata settings.

Do I continue to choose LAN, which is the lagg interface, or do I select the two physical interfaces that are in the lagg?