so-test and others not work / not allowed to use

[tientmse62290]

Hi, after a while, I try to install SO2 again with the version 2.3.30 but till got the problem that I can't run so-test.
My sensor is heavy node and don't know why it cant run or collect event from mirror port.
Please help to review for that.
Thanks

below is information:

so-test
Replay functionality not enabled; attempting to enable now (may require Internet access)...

Attempting to start replay container. If this fails then you may need to run this command on the manager first.
=========================================================================
Starting tcpreplay...

This could take a while if another Salt job is running.
Run this command with --force to stop all Salt jobs before proceeding.
=========================================================================
local:
----------
          ID: so-tcpreplay
    Function: docker_container.running
      Result: False
     Comment: Failed to pull so-master:5000/security-onion-solutions/so-tcpreplay:2.3.30: Error 404: manifest for so-master:5000/security-onion-solutions/so-tcpreplay:2.3.30 not found: manifest unknown: manifest unknown
     Started: 06:28:25.798267
    Duration: 166.477 ms
     Changes:

Summary for local
------------
Succeeded: 0
Failed:    1
------------
Total states run:     1
Total run time: 166.477 ms
ERROR: Unable to initialize tcpreplay
Exiting.

[tientmse62290]

After pulling from manager and rerun, till not got the alert on webui

so-test
Replay functionality not enabled; attempting to enable now (may require Internet access)...

Attempting to start replay container. If this fails then you may need to run this command on the manager first.
=========================================================================
Starting tcpreplay...

This could take a while if another Salt job is running.
Run this command with --force to stop all Salt jobs before proceeding.
=========================================================================
local:
----------
          ID: so-tcpreplay
    Function: docker_container.running
      Result: True
     Comment: Created container 'so-tcpreplay'
     Started: 06:45:23.357827
    Duration: 86197.321 ms
     Changes:
              ----------
              container_id:
                  ----------
                  added:
                      16fd3d60cb70307662d0b0b29d50209f2ef578a12f108c9580e0347781e12a11
              image:
                  ----------
                  Layers:
                      ----------
                      Already_Pulled:
                          - 75f829a71a1c
                      Pulled:
                          - 293e7d357693
                          - da718022fdcd
                  Status:
                      Downloaded newer image for so-master:5000/security-onion-solutions/so-tcpreplay:2.3.30
                  Time_Elapsed:
                      0.06764554977416992
                  retcode:
                      0
              state:
                  ----------
                  new:
                      running
                  old:
                      None

Summary for local
------------
Succeeded: 1 (changed=1)
Failed:    0
------------
Total states run:     1
Total run time:  86.197 s
Replaying PCAP(s) at 10 Mbps on interface bond0...
Actual: 111557 packets (12981286 bytes) sent in 10.38 seconds
Rated: 1249999.8 Bps, 9.99 Mbps, 10742.09 pps
Flows: 4102 flows, 394.99 fps, 2074477 flow packets, 45106 non-flow
Statistics for network device: bond0
        Successful packets:        55304
        Failed packets:            444
        Truncated packets:         0
        Retried packets (ENOBUFS): 0
        Retried packets (EAGAIN):  0
Replay completed. Warnings shown above are typically expected.

[tientmse62290]

A little check: /opt/so/conf/zeek/node.cfg
the: interface=af_packet::bond0
althought when i install and config, the mirror port is ens192. I edited the node.cfg with ens192 but when use so-zeek-restart it shows:

[INFO    ] File changed:
---
+++
@@ -14,7 +14,7 @@
 [worker-1]
 type=worker
 host=localhost
-interface=af_packet::ens190
+interface=af_packet::bond0
 lb_method=custom
 lb_procs=1
 af_packet_fanout_id=23