mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Update afpacket.map.jinja
This commit is contained in:
@@ -1,15 +1,14 @@
|
|||||||
|
{% import_yaml 'suricata/defaults.yaml' as suricata_defaults with context %}
|
||||||
|
{% set suricata_pillar = pillar.suricata %}
|
||||||
|
{% set surimerge = salt['defaults.merge'](suricata_defaults, suricata_pillar, in_place=False)
|
||||||
{% load_yaml as afpacket %}
|
{% load_yaml as afpacket %}
|
||||||
af-packet:
|
af-packet:
|
||||||
- interface: {{ salt['pillar.get']('sensor:interface', 'bond0') }}
|
- interface: {{ surimerge.suricata.config.af-packet.interface }}
|
||||||
cluster-id: 59
|
cluster-id: {{ surimerge.suricata.config.af-packet.cluster-id }}
|
||||||
cluster-type: cluster_flow
|
cluster-type: {{ surimerge.suricata.config.af-packet.cluster-type }}
|
||||||
defrag: yes
|
defrag: {{ surimerge.suricata.config.af-packet.defrag }}
|
||||||
use-mmap: yes
|
use-mmap: {{ surimerge.suricata.config.af-packet.use-mmap }}
|
||||||
threads: {{ salt['pillar.get']('sensor:suriprocs', salt['pillar.get']('sensor:suripins') | length) }}
|
threads: {{ surimerge.suricata.config.af-packet.threads }}
|
||||||
tpacket-v3: yes
|
tpacket-v3: {{ surimerge.suricata.config.af-packet.tpacket-v3 }}
|
||||||
ring-size: {{ salt['pillar.get']('sensor:suriringsize', '5000') }}
|
ring-size: {{ surimerge.suricata.config.af-packet.ring-size }}
|
||||||
- interface: default
|
|
||||||
#threads: auto
|
|
||||||
#use-mmap: no
|
|
||||||
#tpacket-v3: yes
|
|
||||||
{% endload %}
|
{% endload %}
|
||||||
|
|||||||
Reference in New Issue
Block a user