Sensor NIC offload

salt/sensor/files/99-so-checksum-offload-disable

@@ -0,0 +1,12 @@
+#!/bin/bash
+#
+# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
+# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at 
+# https://securityonion.net/license; you may not use this file except in compliance with the
+# Elastic License 2.0.
+
+
+
+. /usr/sbin/so-common
+
+init_monitor $MNIC

salt/sensor/init.sls

@@ -0,0 +1,11 @@
+offload_script:
+  file.managed:
+    - name: /etc/NetworkManager/dispatcher.d/pre-up.d/99-so-checksum-offload-disable
+    - source: salt://sensor/files/99-so-checksum-offload-disable
+    - mode: 755
+
+execute_checksum:
+  cmd.run:
+    - name: /etc/NetworkManager/dispatcher.d/pre-up.d/99-so-checksum-offload-disable
+    - onchanges:
+      - file: offload_script

salt/top.sls

@@ -36,6 +36,7 @@ base:
   
   '*_sensor and G@saltversion:{{saltversion}}':
     - match: compound
+    - sensor
     - ssl
     - sensoroni
     - telegraf
@@ -52,6 +53,7 @@ base:
   '*_eval and G@saltversion:{{saltversion}}':
     - match: compound
     - salt.master
+    - sensor
     - ca
     - ssl
     - registry
@@ -118,6 +120,7 @@ base:
   '*_standalone and G@saltversion:{{saltversion}}':
     - match: compound
     - salt.master
+    - sensor
     - ca
     - ssl
     - registry
@@ -196,6 +199,7 @@ base:
 
   '*_heavynode and G@saltversion:{{saltversion}}':
     - match: compound
+    - sensor
     - ssl
     - sensoroni
     - nginx
@@ -216,6 +220,7 @@ base:
   '*_import and G@saltversion:{{saltversion}}':
     - match: compound
     - salt.master
+    - sensor
     - ca
     - ssl
     - registry