Suricata issue when enabled on LAN

Started by csmall, May 31, 2017, 08:30:02 PM

Previous topic - Next topic
May 31, 2017, 08:30:02 PM Last Edit: June 01, 2017, 12:43:06 AM by csmall
When I enable suricata on my LAN interface it seems to kill it.

I experience incredibly slow web browsing (enough to be able to continue to use to use the opnsense webui to remove LAN ) and other traffic like streaming YouTube or even loading the video thumbnails in the YouTube app just stops working.

No blocks are registered and I have tried disabling all rules but it always behaves this way.

Wan seems to work fine. I am using an emX intel card. CPU is an i3

Any idea what to troubleshoot here?

I have it working on LAN now. If I try to enable LAN and wan together that's when my network goes to shit.

Does it make more sense to enable suricata on the LAN instead of the wan?

I don't understand why enabling both kills everything.