merhaba windows umdan suricata ile DPI yapmaya çalışırken bu hatayı aldım Info: win32-service: Running as service: no
i: suricata: This is Suricata version 7.0.6 RELEASE running in USER mode
i: runmodes: thread stack size of 0 to too small: setting to 512k
W: runmodes: No output module named eve-log.app-layer-event
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Request flood detected";       app-layer-event:dnp3.flooded; classtype:protocol-command-decode; sid:2270000; rev:2;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 7
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Length too small";       app-layer-event:dnp3.len_too_small; classtype:protocol-command-decode; sid:2270001; rev:3;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 13
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Bad link CRC";       app-layer-event:dnp3.bad_link_crc; classtype:protocol-command-decode; sid:2270002; rev:2;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 17
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Bad transport CRC";       app-layer-event:dnp3.bad_transport_crc; classtype:protocol-command-decode; sid:2270003; rev:2;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 21
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Unknown object";       app-layer-event:dnp3.unknown_object; classtype:protocol-command-decode; sid:2270004; rev:2;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 25
E: threshold-config: pcre2_match parse error, ret -1, string binary: threshold.json
W: suricata: setrlimit unavailable.
i: threads: Threads created -> RX: 1 W: 4 FM: 1 FR: 1   Engine started.
i: suricata: Signal Received.  Stopping engine.
i: pcap: read 1 file, 50 packets, 17005 bytes

C:\Program Files\Suricata>suricata.exe -r "C:\Users\Rasit\Desktop\PCAPdroid_21_Agu_17_46_35.pcap" -l "C:\Users\Rasit\Documents\suricata_logs" -k none
Info: win32-service: Running as service: no
i: suricata: This is Suricata version 7.0.6 RELEASE running in USER mode
i: runmodes: thread stack size of 0 to too small: setting to 512k
W: runmodes: No output module named eve-log.app-layer-event
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Request flood detected";       app-layer-event:dnp3.flooded; classtype:protocol-command-decode; sid:2270000; rev:2;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 7
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Length too small";       app-layer-event:dnp3.len_too_small; classtype:protocol-command-decode; sid:2270001; rev:3;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 13
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Bad link CRC";       app-layer-event:dnp3.bad_link_crc; classtype:protocol-command-decode; sid:2270002; rev:2;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 17
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Bad transport CRC";       app-layer-event:dnp3.bad_transport_crc; classtype:protocol-command-decode; sid:2270003; rev:2;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 21
E: detect-app-layer-event: protocol dnp3 is disabled
E: detect: error parsing signature "alert dnp3 any any -> any any (msg:"SURICATA DNP3 Unknown object";       app-layer-event:dnp3.unknown_object; classtype:protocol-command-decode; sid:2270004; rev:2;)" from file C:\\Program Files\\Suricata\\rules\\dnp3-events.rules at line 25
E: threshold-config: pcre2_match parse error, ret -1, string binary: threshold.json
W: suricata: setrlimit unavailable.
i: threads: Threads created -> RX: 1 W: 4 FM: 1 FR: 1   Engine started.
i: suricata: Signal Received.  Stopping engine.
i: pcap: read 1 file, 50 packets, 17005 bytes