CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

allow for mmap-locked to be configured

Browse Source
This commit is contained in:
m0duspwnens
2024-04-24 13:26:25 -04:00
parent 428fe787c4
commit 0bd0c7b1ec
3 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
salt/suricata/defaults.yaml
View File

@@ -30,6 +30,7 @@ suricata:
cluster-type: cluster_flow cluster-type: cluster_flow
defrag: "yes" defrag: "yes"
use-mmap: "yes" use-mmap: "yes"
mmap-locked: "yes"
threads: 1 threads: 1
tpacket-v3: "yes" tpacket-v3: "yes"
ring-size: 5000 ring-size: 5000

1
salt/suricata/map.jinja
View File

@@ -34,6 +34,7 @@
cluster-type: {{ SURICATAMERGED.config['af-packet']['cluster-type'] }} cluster-type: {{ SURICATAMERGED.config['af-packet']['cluster-type'] }}
defrag: "{{ SURICATAMERGED.config['af-packet'].defrag }}" defrag: "{{ SURICATAMERGED.config['af-packet'].defrag }}"
use-mmap: "{{ SURICATAMERGED.config['af-packet']['use-mmap'] }}" use-mmap: "{{ SURICATAMERGED.config['af-packet']['use-mmap'] }}"
mmap-locked: {{ SURICATAMERGED.config['af-packet']['mmap-locked'] }}
threads: {{ SURICATAMERGED.config['af-packet'].threads }} threads: {{ SURICATAMERGED.config['af-packet'].threads }}
tpacket-v3: "{{ SURICATAMERGED.config['af-packet']['tpacket-v3'] }}" tpacket-v3: "{{ SURICATAMERGED.config['af-packet']['tpacket-v3'] }}"
ring-size: {{ SURICATAMERGED.config['af-packet']['ring-size'] }} ring-size: {{ SURICATAMERGED.config['af-packet']['ring-size'] }}

5
salt/suricata/soc_suricata.yaml
View File

@@ -83,6 +83,11 @@ suricata:
use-mmap: use-mmap:
advanced: True advanced: True
readonly: True readonly: True
mmap-locked:
description: Prevent swapping by locking the memory map.
advanced: True
regex: ^(yes|no)$
helpLink: suricata.html
threads: threads:
description: The amount of worker threads. description: The amount of worker threads.
helpLink: suricata.html helpLink: suricata.html