From 71a260a000e3521df375ccaff46c20d392f6e1a4 Mon Sep 17 00:00:00 2001
From: weslambert <wlambertts@gmail.com>
Date: Mon, 2 Nov 2020 08:38:45 -0500
Subject: [PATCH] Match max-pending-packets size

---
 salt/suricata/afpacket.map.jinja | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/suricata/afpacket.map.jinja b/salt/suricata/afpacket.map.jinja
index 37b80aa87..a6c390abb 100644
--- a/salt/suricata/afpacket.map.jinja
+++ b/salt/suricata/afpacket.map.jinja
@@ -7,9 +7,9 @@ af-packet:
     use-mmap: yes
     threads: {{ salt['pillar.get']('sensor:suriprocs', salt['pillar.get']('sensor:suripins') | length) }}
     tpacket-v3: yes
-    ring-size: {{ salt['pillar.get']('sensor:suriringsize', '2048') }}
+    ring-size: {{ salt['pillar.get']('sensor:suriringsize', '5000') }}
   - interface: default
     #threads: auto
     #use-mmap: no
     #tpacket-v3: yes
-{% endload %}
\ No newline at end of file
+{% endload %}