Merge pull request #1467 from Security-Onion-Solutions/issue/1460

Issue/1460
2025-12-06 17:22:49 +01:00 · 2020-10-06 14:06:01 -04:00
parent f809cf5216 3d71766b64
commit 51d3defe76
2 changed files with 2 additions and 1 deletions
--- a/salt/suricata/afpacket.map.jinja
+++ b/salt/suricata/afpacket.map.jinja
@@ -5,6 +5,7 @@ af-packet:
    cluster-type: cluster_flow
    defrag: yes
    use-mmap: yes
+    threads: {{ salt['pillar.get']('sensor:suriprocs', salt['pillar.get']('sensor:suripins') | length) }}
    tpacket-v3: yes
    ring-size: {{ salt['pillar.get']('sensor:suriringsize', '2048') }}
  - interface: default
--- a/salt/suricata/defaults.yaml
+++ b/salt/suricata/defaults.yaml
@@ -345,7 +345,7 @@ suricata:
    coredump:
      max-dump: unlimited
    host-mode: auto
-    max-pending-packets: 1024
+    max-pending-packets: 5000
    runmode: workers
    #autofp-scheduler: hash
    default-packet-size: 1500