More suricata log details

Hello to all,

I just wanted to know that how can I have more details about attacks which suricata shows in ips logs section? Currently, there is not much info to analayze the attack. There is only source/destination IPs , rule name. Is there anything I should config the suricata in ipfire to show more details of connections.(like pcap file). Thanks

Great idea. I was also wondering about that.In case something happens I need to know more about the connection. I think this could be the right command.

suricata -r [path to pcap file]