Watching Tom’s video on transparent bridge I heard the SG-3100 “chokes” on Snort. He deviated to Suricata and that did work.
Further net searches raised the question if the Snort-on-SG-3100 issues could be a Arm-CPU - package compatibility issue. At least some hinted at that.
Nothing came up in an extended search, so I thought I’d drop it here. Anyone aware of packages that run on Intel but fail on Arm?