Suricata

Can you provide us with more details? Especially the `rule-files` section of your config where you include the rules. This could also be an issue with your oinkmaster configuration.

I think, that isn't problem with oinkmaster, because all another rules have been modified excellent.
What do you mean when say "rule-files section"? In suricata.yaml in section when we should add/disable rules, I have commented emerging-chat.rules for disable this rules. I've attached file with part of suricta.yaml config.
In oinkmaster.conf I only change priority for rules, like this - modifysid 2012648, ..., "classtype:" | "priority:3; classtype:".
So, problem is that I can't disable/switch off chat-rules.
I think maybe this rules have dependents with flowbits, but NO.

Thanks