--- suricata-4.1.2-orig/src/util-privs.c	2020-02-02 16:42:21.090845337 +0000
+++ suricata-4.1.2/src/util-privs.c	2020-02-02 16:20:11.390855310 +0000
@@ -75,9 +75,10 @@ void SCDropMainThreadCaps(uint32_t useri
                     CAP_NET_ADMIN, CAP_NET_RAW, CAP_SYS_NICE,
                     -1);
             break;
+        case RUNMODE_NFLOG:
         case RUNMODE_NFQ:
             capng_updatev(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED,
-                    CAP_NET_ADMIN,          /* needed for nfqueue inline mode */
+                    CAP_NET_ADMIN,          /* needed for nflog and nfqueue inline mode */
                     CAP_SYS_NICE,
                     -1);
             break;