CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

suricata interface None if so-import

Browse Source
This commit is contained in:
m0duspwnens
2023-11-22 10:11:34 -05:00
parent 0cfb8b0816
commit 1dc88781f1
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/suricata/afpacket.map.jinja
View File

@@ -1,6 +1,6 @@
{% load_yaml as afpacket %} {% load_yaml as afpacket %}
af-packet: af-packet:
- interface: {{ salt['pillar.get']('sensor:interface', 'bond0') }} - interface: {{ None if grains.role == 'so-import' else salt['pillar.get']('sensor:interface', 'bond0') }}
cluster-id: 59 cluster-id: 59
cluster-type: cluster_flow cluster-type: cluster_flow
defrag: yes defrag: yes
@@ -8,8 +8,4 @@ af-packet:
threads: {{ salt['pillar.get']('sensor:suriprocs', salt['pillar.get']('sensor:suripins') | length) }} threads: {{ salt['pillar.get']('sensor:suriprocs', salt['pillar.get']('sensor:suripins') | length) }}
tpacket-v3: yes tpacket-v3: yes
ring-size: {{ salt['pillar.get']('sensor:suriringsize', '5000') }} ring-size: {{ salt['pillar.get']('sensor:suriringsize', '5000') }}
- interface: default
#threads: auto
#use-mmap: no
#tpacket-v3: yes
{% endload %} {% endload %}