CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

FIX: SOC Config pcap doc links should point to steno docs #11302

Browse Source
This commit is contained in:
Doug Burks
2023-09-13 07:37:54 -04:00
committed by GitHub
parent 6fdd7b3751
commit 11b8e13418
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
salt/pcap/soc_pcap.yaml
View File

@@ -1,35 +1,35 @@
pcap:
enabled:
description: You can enable or disable Stenographer on all sensors or a single sensor.
helpLink: pcap.html
helpLink: stenographer.html
config:
maxdirectoryfiles:
description: The maximum number of packet/index files to create before deleting old files.
helpLink: pcap.html
helpLink: stenographer.html
diskfreepercentage:
description: The disk space percent to always keep free for PCAP
helpLink: pcap.html
helpLink: stenographer.html
blocks:
description: The number of 1MB packet blocks used by AF_PACKET to store packets in memory, per thread. You shouldn't need to change this.
advanced: True
helpLink: pcap.html
helpLink: stenographer.html
preallocate_file_mb:
description: File size to pre-allocate for individual PCAP files. You shouldn't need to change this.
advanced: True
helpLink: pcap.html
helpLink: stenographer.html
aiops:
description: The max number of async writes to allow at once.
advanced: True
helpLink: pcap.html
helpLink: stenographer.html
pin_to_cpu:
description: Enable CPU pinning for PCAP.
advanced: True
helpLink: pcap.html
helpLink: stenographer.html
cpus_to_pin_to:
description: CPU to pin PCAP to. Currently only a single CPU is supported.
advanced: True
helpLink: pcap.html
helpLink: stenographer.html
disks:
description: List of disks to use for PCAP. This is currently not used.
advanced: True
helpLink: pcap.html
helpLink: stenographer.html