suricata: avoid at exit crash in nfq mode

When Suricata was build with ebpf support and when it was started
in NFQ mode, it was crashing at exit because it was trying to free
the device extension.

This patch fixes the issue by only trigger the eBPF related code
when Suricata is running in AFP_PACKET mode.

diff --git a/src/suricata.c b/src/suricata.c
index 548d4c238ce50e2aac41f8823dee6c0e52ccd133..4f054aeb1dbce1a13da5e63c23a06425eb0d74a0 100644 (file)
--- a/src/suricata.c
+++ b/src/suricata.c
@@ -2479,8 +2479,10 @@ int PostConfLoadedSetup(SCInstance *suri)
 
     StorageInit();
 #ifdef HAVE_PACKET_EBPF
-    EBPFRegisterExtension();
-    LiveDevRegisterExtension();
+    if (suri->run_mode == RUNMODE_AFP_DEV) {
+        EBPFRegisterExtension();
+        LiveDevRegisterExtension();
+    }
 #endif
     RegisterFlowBypassInfo();